-

CVE-2026-89989

ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()

In the Linux kernel, the following vulnerability has been resolved:

ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()

dentry_path() returns ERR_PTR(-ENAMETOOLONG) when the path exceeds the
buffer. validate_hash_algo() passes the result straight to
integrity_audit_msg() without checking. ERR_PTR is not NULL, so
integrity_audit_message() sees a valid pointer and calls strlen() on
it, which faults:

    BUG: unable to handle page fault for address: ffffffffffffffdc
    RIP: 0010:strlen+0x30/0xa0
    Call Trace:
     audit_log_untrustedstring+0x19/0x30
     integrity_audit_message+0x366/0x4f0
     ima_inode_setxattr+0x512/0x5f0

Check for IS_ERR() and use NULL instead, which makes the audit message
skip the name= field instead of crashing.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4f2946aa0c45c78b4f4ef101bab9694e38c68db0
Version < d6fade89903c8fd0af6c956242aec8b927040e02
Status affected
Version 4f2946aa0c45c78b4f4ef101bab9694e38c68db0
Version < 0de5b525c0cd7d202848b8adfde3c01c287fb1a6
Status affected
Version 4f2946aa0c45c78b4f4ef101bab9694e38c68db0
Version < 30b5c0e17dcad72b6b2f987319aa645570e6376d
Status affected
Version 4f2946aa0c45c78b4f4ef101bab9694e38c68db0
Version < 9e69d683ebd7def04557fe758ff123105d7d9840
Status affected
Version 4f2946aa0c45c78b4f4ef101bab9694e38c68db0
Version < f8a2f2a4602318eb93d49d27fd0d0fdaab17edde
Status affected
Version 4f2946aa0c45c78b4f4ef101bab9694e38c68db0
Version < d62a84a78de5f29c642fa3bd4eee072ba7289cb4
Status affected
Version 4f2946aa0c45c78b4f4ef101bab9694e38c68db0
Version < 8861f6d5c0678a7c5089c7b272509fc5931b8437
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version 0
Version < 5.15
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.109
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/d6fade89903c8fd0af6c956242aec8b927040e02
https://git.kernel.org/stable/c/0de5b525c0cd7d202848b8adfde3c01c287fb1a6
https://git.kernel.org/stable/c/30b5c0e17dcad72b6b2f987319aa645570e6376d
https://git.kernel.org/stable/c/9e69d683ebd7def04557fe758ff123105d7d9840
https://git.kernel.org/stable/c/f8a2f2a4602318eb93d49d27fd0d0fdaab17edde
https://git.kernel.org/stable/c/d62a84a78de5f29c642fa3bd4eee072ba7289cb4
https://git.kernel.org/stable/c/8861f6d5c0678a7c5089c7b272509fc5931b8437