{
  "schema_version": "1.6.1",
  "id": "RPI-CVE-2026-89989",
  "modified": "2026-10-07T17:22:01Z",
  "upstream": [
    "CVE-2026-89989"
  ],
  "published": "2026-09-16T10:32:03Z",
  "summary": "ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()",
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nima: Check for ERR_PTR from dentry_path() in validate_hash_algo()\n\ndentry_path() returns ERR_PTR(-ENAMETOOLONG) when the path exceeds the\nbuffer. validate_hash_algo() passes the result straight to\nintegrity_audit_msg() without checking. ERR_PTR is not NULL, so\nintegrity_audit_message() sees a valid pointer and calls strlen() on\nit, which faults:\n\n    BUG: unable to handle page fault for address: ffffffffffffffdc\n    RIP: 0010:strlen+0x30/0xa0\n    Call Trace:\n     audit_log_untrustedstring+0x19/0x30\n     integrity_audit_message+0x366/0x4f0\n     ima_inode_setxattr+0x512/0x5f0\n\nCheck for IS_ERR() and use NULL instead, which makes the audit message\nskip the name= field instead of crashing.",
  "affected": [
    {
      "package": {
        "ecosystem": "Raspberry Pi OS:12",
        "name": "linux"
      },
      "versions": [
        "1:6.1.47-1+rpt4"
      ],
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-2712",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v6",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7l",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v8",
            "binary_version": "1:6.1.47-1+rpt4"
          }
        ]
      },
      "database_specific": {
        "per_version": {
          "1:6.1.47-1+rpt4": {
            "linux_commit": "655fc658a15ae7a6f37103754adb39ba52a9a14e",
            "upstream_version": "6.1.47",
            "assessment": "commit ancestry (strak rule)",
            "upstream_fixed": "6.1.188",
            "compiled_filter": false
          }
        }
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89989"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/d6fade89903c8fd0af6c956242aec8b927040e02"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/0de5b525c0cd7d202848b8adfde3c01c287fb1a6"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/30b5c0e17dcad72b6b2f987319aa645570e6376d"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/9e69d683ebd7def04557fe758ff123105d7d9840"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/f8a2f2a4602318eb93d49d27fd0d0fdaab17edde"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/d62a84a78de5f29c642fa3bd4eee072ba7289cb4"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/8861f6d5c0678a7c5089c7b272509fc5931b8437"
    }
  ],
  "database_specific": {
    "source": "https://git.kernel.org/pub/scm/linux/security/vulns.git",
    "upstream_modified": "2026-09-16T10:32:03Z"
  }
}