CVE-2026-72316

Source
https://cve.org/CVERecord?id=CVE-2026-72316
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72316.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72316
Downstream
Published
2026-08-15T05:55:30.399Z
Modified
2026-08-16T03:48:39.969293054Z
Summary
dm era: fix NULL pointer dereference in metadata_open()
Details

In the Linux kernel, the following vulnerability has been resolved:

dm era: fix NULL pointer dereference in metadata_open()

metadataopen() returns NULL when kzallocobj() fails, but the caller eractr() only checks ISERR(md). Since IS_ERR(NULL) returns false, the NULL pointer is treated as a valid result and later assigned to era->md, leading to a NULL pointer dereference when the metadata is accessed.

Fix this by returning ERRPTR(-ENOMEM) on allocation failure, consistent with dm-cache-metadata.c, dm-thin-metadata.c, and dm-clone-metadata.c which all use ERRPTR(-ENOMEM) for the same pattern.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72316.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
eec40579d84873dfb7021eb24c50360f073237c5
Fixed
a705e056c2f3dd067fb2ff414f0537530baa090b
Fixed
bd5a80128bdfc93b1cae935a70da000b8c483e6e
Fixed
17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8
Fixed
889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3
Fixed
01c49eae7c6256f2d8cc08210a2bac3ee070e43a
Fixed
14e03ecd3b1b5fc03c082b27a2f8889f8290c30e
Fixed
b69ea153d30ce19ca8997eeeca1e2219fae5a29b
Fixed
9ae672606c17891d90b282e3490b817620549599

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72316.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.15.0
Fixed
5.10.261
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72316.json"