# CVE-2026-93257: Linux kernel block layer metadata integrity logic flaw

Source: https://junglewise.ai/threats/cve-2026-93257-in-the-linux-kernel-the-following-vulnerability-has-been-resolved  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-24. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-93257 · Severity: info · Published 2026-09-24

The Linux kernel's block layer failed to properly validate integrity protection information (PI) metadata flags before processing, allowing incorrect metadata generation and potential system crashes. This affects systems using the filesystem-based bio integrity helpers when handling non-PI metadata operations. The flaw could lead to data corruption or kernel panics during metadata verification.

Technologies: [Unknown Linux kernel](https://junglewise.ai/threats/technologies/unknown-linux-kernel). Vendors: [Unknown](https://junglewise.ai/threats/vendors/unknown).

## Quick answers

**Is CVE-2026-93257 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-93257 being exploited in the wild.

**How severe is CVE-2026-93257?** Informational severity, published 24 September 2026.

**Which products and versions are affected?** Unknown Linux kernel all versions with fs_bio_integrity helpers (from commit 0bde8a12b554 onwards).

**Is there a fix for CVE-2026-93257?** A patch was published on 2026-08-04. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-93257 attacked?** It is attacked with local access, in an operating system.

**Am I affected by CVE-2026-93257?** Check whether you run Unknown Linux kernel at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A logic error in the fs-integrity block layer helpers (fs_bio_integrity_generate and fs_bio_integrity_verify) failed to check BIP_CHECK_FLAGS before processing protection information, causing the functions to be called on non-PI metadata. This results in generation of incorrect metadata and crashes in the verification handler. The fix adds flag checks to match the behavior of the block layer's auto-generated metadata path.

## Affected products

- <UNKNOWN> Linux kernel all versions with fs_bio_integrity helpers (from commit 0bde8a12b554 onwards)

## Timeline

- 2026-09-24: disclosed
- 2026-08-04: patched

## References

- [https://git.kernel.org/stable/c/3bf9a21e7bccfd8c35b440efd114c61cc9838a41](https://git.kernel.org/stable/c/3bf9a21e7bccfd8c35b440efd114c61cc9838a41)
- [https://git.kernel.org/stable/c/b681c740e6d645f7d7477e9208db57917c6c0fbc](https://git.kernel.org/stable/c/b681c740e6d645f7d7477e9208db57917c6c0fbc)

## Related threats

- [Linux kernel netfilter nft_byteorder multi-register bypass](https://junglewise.ai/threats/cve-2026-99285-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel GPIO null pointer dereference in shared GPIO lookup](https://junglewise.ai/threats/cve-2026-99257-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel NTFS race condition in page fault handler](https://junglewise.ai/threats/cve-2026-99241-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel i915 DMC firmware load address validation bypass](https://junglewise.ai/threats/cve-2026-99146-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel dm-integrity buffer overflow in inline mode](https://junglewise.ai/threats/cve-2026-99098-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)