CVE-2026-89989
Description
In the Linux kernel, the following vulnerability has been resolved: ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() dentry_path() returns ERR_PTR(-ENAMETOOLONG) when the path exceeds the buffer. validate_hash_algo() passes the result straight to integrity_audit_msg() without checking. ERR_PTR is not NULL, so integrity_audit_message() sees a valid pointer and calls strlen() on it, which faults: BUG: unable to handle page fault for address: ffffffffffffffdc RIP: 0010:strlen+0x30/0xa0 Call Trace: audit_log_untrustedstring+0x19/0x30 integrity_audit_message+0x366/0x4f0 ima_inode_setxattr+0x512/0x5f0 Check for IS_ERR() and use NULL instead, which makes the audit message skip the name= field instead of crashing.
How to fix
- Linux Linuxd6fade89903c8fd0af6c956242aec8b927040e02, 0de5b525c0cd7d202848b8adfde3c01c287fb1a6, 30b5c0e17dcad72b6b2f987319aa645570e6376d, 9e69d683ebd7def04557fe758ff123105d7d9840, f8a2f2a4602318eb93d49d27fd0d0fdaab17edde, d62a84a78de5f29c642fa3bd4eee072ba7289cb4, 8861f6d5c0678a7c5089c7b272509fc5931b8437 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4f2946aa0c45c78b4f4ef101bab9694e38c68db0 ≤ v < d6fade89903c8fd0af6c956242aec8b927040e02, 4f2946aa0c45c78b4f4ef101bab9694e38c68db0 ≤ v < 0de5b525c0cd7d202848b8adfde3c01c287fb1a6, 4f2946aa0c45c78b4f4ef101bab9694e38c68db0 ≤ v < 30b5c0e17dcad72b6b2f987319aa645570e6376d, 4f2946aa0c45c78b4f4ef101bab9694e38c68db0 ≤ v < 9e69d683ebd7def04557fe758ff123105d7d9840, 4f2946aa0c45c78b4f4ef101bab9694e38c68db0 ≤ v < f8a2f2a4602318eb93d49d27fd0d0fdaab17edde, 4f2946aa0c45c78b4f4ef101bab9694e38c68db0 ≤ v < d62a84a78de5f29c642fa3bd4eee072ba7289cb4, 4f2946aa0c45c78b4f4ef101bab9694e38c68db0 ≤ v < 8861f6d5c0678a7c5089c7b272509fc5931b8437, 5.15 | d6fade89903c8fd0af6c956242aec8b927040e02, 0de5b525c0cd7d202848b8adfde3c01c287fb1a6, 30b5c0e17dcad72b6b2f987319aa645570e6376d, 9e69d683ebd7def04557fe758ff123105d7d9840, f8a2f2a4602318eb93d49d27fd0d0fdaab17edde, d62a84a78de5f29c642fa3bd4eee072ba7289cb4, 8861f6d5c0678a7c5089c7b272509fc5931b8437 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.