Heap-based buffer overflow in Linux kernel - CVE-2026-90052

Vulnerability details

The vulnerability allows a local privileged user to cause a heap-based buffer overflow.

The vulnerability exists due to a heap-based buffer overflow in the integrity_metadata function in drivers/md/dm-integrity.c when processing keyed discard operations with a tag size smaller than the digest size. A local privileged user can issue a keyed discard operation to cause a heap-based buffer overflow.

Affected software

How to mitigate CVE-2026-90052

External References

• https://git.kernel.org/stable/c/59e6f919d77d72ec79cbf171256f2f7819737580
• https://git.kernel.org/stable/c/9988c1c9e0d1c78391e3d8e2817beb667470c76f
• https://git.kernel.org/stable/c/dd08a645195f410f2dcaa40de379a45ce110e873

Related Security Bulletins

• Heap-based buffer overflow in Linux kernel md driver