CVE-2026-89169
Bypass of dm-verity enforcement when .verity file missing in Debian live-boot
live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing.
CVSS 4.0 · 4.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products