CVE-2026-72096
In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v->corrupted_errs" was not atomic, thus it could be subject to race conditions. The call to dm_audit_log_target("max-corrupted-errors") may be skipped due to the races.
Affected versions
Linux kernel versions
4.1
and later are affected. Fixed in
6.6.148,
6.12.97,
6.18.40,
7.1.5,
7.2-rc3
and their respective stable series.
References
5 totalFrequently asked questions
-
What is CVE-2026-72096?
CVE-2026-72096 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 4.1 onward and has been patched in 6.6.148, 6.12.97, 6.18.40 and others. CVE-2026-72096 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-72096?
Yes. CVE-2026-72096 has been patched. Fixed versions include 6.6.148, 6.12.97, 6.18.40 and others. If you are running Linux kernel 4.1 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-72096 actively exploited?
No. CVE-2026-72096 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.