CVE-2026-72102

HighCVSS 7.8/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dm_early_create: fix freeing used table on dm_resume failure

If dm_resume fails, the kernel attempts to free table with dm_table_destroy, but the table was already instantiated with dm_swap_table. This commit skips the call to dm_table_destroy in this case.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 6bbc923dfcf57d6b97388819a7393835664c7a8e, < 3ba377a47a093cc19647ca7f102acd33a211d472; >= 6bbc923dfcf57d6b97388819a7393835664c7a8e, < 72c3283a2abd60ecef295e02270f22ef1dfccd25; >= 6bbc923dfcf57d6b97388819a7393835664c7a8e, < d6066145347e14db84c35b445e309f095d0d8125; >= 6bbc923dfcf57d6b97388819a7393835664c7a8e, < 259ce9e3fc3a3f8c4e393a2072b8f34302eb4d5a; >= 6bbc923dfcf57d6b97388819a7393835664c7a8e, < 5f6500d44a912d4aed664600966706d76b81d9af; >= 6bbc923dfcf57d6b97388819a7393835664c7a8e, < 92e3c93d60be1f2425738cd66dbadac7d6bc0cd1; >= 6bbc923dfcf57d6b97388819a7393835664c7a8e, < 7d8ed7cb844df21e4d93af11250fb3a5cb861147; >= 6bbc923dfcf57d6b97388819a7393835664c7a8e, < 366665416f20527ff7cad548a32d1ddf23195740
LinuxLinux5.1

References

Timeline

Published
Aug 15, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-721037.3In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device fileCVE-2026-72104In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parseCVE-2026-721057.8In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit machines Commit c20e36b763CVE-2026-72106In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in list_version_get_info sizeof(tt->CVE-2026-721078.8In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-zero start sector dm-eCVE-2026-721087.8In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consistency on commit failure CVE-2026-721097.8In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5_regisCVE-2026-72117.3A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcp_server.CVE-2026-721107.8In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe ->bpf_storage before bailouts that access it Currently,CVE-2026-721118.8In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register bounds before narrowing retval range in check_mem_aCVE-2026-721127.8In the Linux kernel, the following vulnerability has been resolved: io_uring/bpf-ops: reject re-registration of an already-bound ops io_inCVE-2026-721137.8In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing device refcount for CAN filter removal sashiko-b
CVE-2026-72102: High severity, CVSS 7.8 | Vulnix