---
id: CVE-2026-99087
title: 'dm-integrity: fix NULL pointer dereference when the ''R'' flag is used'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dm-integrity: fix NULL pointer dereference when the 'R' flag is used

  If the dm-integrity device has the SB_FLAG_DIRTY_BITMAP flag set and the
  user activates the device…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 468dfca38b1a6fbdccd195d875599cb7c8875cd9 <
    2e25842f0e4423e0efb243f56153d842ed6b933f
  - >-
    Linux >= 468dfca38b1a6fbdccd195d875599cb7c8875cd9 <
    69ed43ed8a174465fca1ba6bfbde53e4618c8956
  - >-
    Linux >= 468dfca38b1a6fbdccd195d875599cb7c8875cd9 <
    7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84
  - Linux 5.2
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T12:45:05.714Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-99087'
references:
  - url: 'https://git.kernel.org/stable/c/2e25842f0e4423e0efb243f56153d842ed6b933f'
  - url: 'https://git.kernel.org/stable/c/69ed43ed8a174465fca1ba6bfbde53e4618c8956'
  - url: 'https://git.kernel.org/stable/c/7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.507Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dm-integrity: fix NULL pointer dereference when the 'R' flag is used

If the dm-integrity device has the SB_FLAG_DIRTY_BITMAP flag set and the
user activates the device in the 'R' mode, a crash in dm_integrity_resume
happens because the function attempts to read the journal containing the
bitmap.

This patch makes dm-integrity skip any writes to the device in
dm_integrity_resume if the device is activated in the 'R' mode.

## Affected

- `Linux >= 468dfca38b1a6fbdccd195d875599cb7c8875cd9 < 2e25842f0e4423e0efb243f56153d842ed6b933f`
- `Linux >= 468dfca38b1a6fbdccd195d875599cb7c8875cd9 < 69ed43ed8a174465fca1ba6bfbde53e4618c8956`
- `Linux >= 468dfca38b1a6fbdccd195d875599cb7c8875cd9 < 7d4d4f3b668d708d94f62ecdd33ac330a6fd8a84`
- `Linux 5.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.