CVE-2026-74590

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions<br /> <br /> The BPF verifier and the dynptr abstraction ensure that the memory space<br /> referenced by a dynptr remains valid. They do not, however, provide any<br /> guarantee that the contents of the memory are stable. kfuncs are<br /> expected to remain memory-safe even if concurrent modifications occur.<br /> <br /> bpf_get_fsverity_digest() didn&amp;#39;t follow that: it could crash if<br /> arg-&gt;digest_size was concurrently modified.<br /> <br /> Fix that by using the known-good value hash_alg-&gt;digest_size instead.<br /> <br /> Also widen &amp;#39;dynptr_sz&amp;#39; and &amp;#39;out_digest_sz&amp;#39; to u64 to match the return<br /> type of __bpf_dynptr_size(). It doesn&amp;#39;t appear that it can actually be<br /> more than INT_MAX currently (since __bpf_dynptr_data_rw() excludes<br /> file-based pointers), but the correct type might as well be used.