CVE-2026-72098

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow exists in dm-verity-fec during Forward Error Correction (FEC) calculations. The issue occurs when the *neras variable is incremented beyond the roots limit, allowing it to reach roots + 1. This value is subsequently passed as the no eras parameter to the decode rs8() function. Within the Reed-Solomon decoder, the erasure locator polynomial loop writes to lambda[j], where j can reach nroots + 1. Since the lambda[] array is sized nroots + 1 (with valid indices from 0 to nroots), this results in an out-of-bounds write that corrupts the syn[0] syndrome buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.