CVE-2026-72316

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dm era: fix NULL pointer dereference in metadata_open()

metadata_open() returns NULL when kzalloc_obj() fails, but the caller era_ctr() only checks IS_ERR(md). Since IS_ERR(NULL) returns false, the NULL pointer is treated as a valid result and later assigned to era->md, leading to a NULL pointer dereference when the metadata is accessed.

Fix this by returning ERR_PTR(-ENOMEM) on allocation failure, consistent with dm-cache-metadata.c, dm-thin-metadata.c, and dm-clone-metadata.c which all use ERR_PTR(-ENOMEM) for the same pattern.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= eec40579d84873dfb7021eb24c50360f073237c5, < a705e056c2f3dd067fb2ff414f0537530baa090b; >= eec40579d84873dfb7021eb24c50360f073237c5, < bd5a80128bdfc93b1cae935a70da000b8c483e6e; >= eec40579d84873dfb7021eb24c50360f073237c5, < 17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8; >= eec40579d84873dfb7021eb24c50360f073237c5, < 889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3; >= eec40579d84873dfb7021eb24c50360f073237c5, < 01c49eae7c6256f2d8cc08210a2bac3ee070e43a; >= eec40579d84873dfb7021eb24c50360f073237c5, < 14e03ecd3b1b5fc03c082b27a2f8889f8290c30e; >= eec40579d84873dfb7021eb24c50360f073237c5, < b69ea153d30ce19ca8997eeeca1e2219fae5a29b; >= eec40579d84873dfb7021eb24c50360f073237c5, < 9ae672606c17891d90b282e3490b817620549599
LinuxLinux3.15

References

Timeline

Published
Aug 15, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-723179.8In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connect_worker The TLS conneCVE-2026-723189.4In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parse_dfs_referrals() validCVE-2026-723199.8In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko poinCVE-2026-72327.2The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '[parameter name]' parameter in all versions up to, CVE-2026-723209.1In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_lookup: fix catchall element handling with inverted lookCVE-2026-72321In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stoCVE-2026-723229.8In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed work A race condition exCVE-2026-723239.8In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() A race conditioCVE-2026-72324In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: free generic chips on unbind irq_alloc_domain_generic_chiCVE-2026-72325In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch CVE-2026-72326In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that underflow length CAKE accCVE-2026-72327In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject invalid indirect BO handle in indirect CSD setup v3d_g
CVE-2026-72316: Unscored | Vulnix