CVE-2026-72316dm era: fix NULL pointer dereference in metadata_open()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata_open() metadata_open() returns NULL when kzalloc_obj() fails, but the caller era_ctr() only checks IS_ERR(md). Since IS_ERR(NULL) returns false, the NULL pointer is treated as a valid result and later assigned to era->md, leading to a NULL pointer dereference when the metadata is accessed. Fix this by returning ERR_PTR(-ENOMEM) on allocation failure, consistent with dm-cache-metadata.c, dm-thin-metadata.c, and dm-clone-metadata.c which all use ERR_PTR(-ENOMEM) for the same pattern.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from eec40579d84873dfb7021eb24c50360f073237c5 before a705e056c2f3dd067fb2ff414f0537530baa090b; from eec40579d84873dfb7021eb24c50360f073237c5 before bd5a80128bdfc93b1cae935a70da000b8c483e6e; from eec40579d84873dfb7021eb24c50360f073237c5 before 17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8; from eec40579d84873dfb7021eb24c50360f073237c5 before 889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3; from eec40579d84873dfb7021eb24c50360f073237c5 before 01c49eae7c6256f2d8cc08210a2bac3ee070e43a; from eec40579d84873dfb7021eb24c50360f073237c5 before 14e03ecd3b1b5fc03c082b27a2f8889f8290c30e; from eec40579d84873dfb7021eb24c50360f073237c5 before b69ea153d30ce19ca8997eeeca1e2219fae5a29b; from eec40579d84873dfb7021eb24c50360f073237c5 before 9ae672606c17891d90b282e3490b817620549599 | CNA record |
References
- https://git.kernel.org/stable/c/a705e056c2f3dd067fb2ff414f0537530baa090b
- https://git.kernel.org/stable/c/bd5a80128bdfc93b1cae935a70da000b8c483e6e
- https://git.kernel.org/stable/c/17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8
- https://git.kernel.org/stable/c/889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3
- https://git.kernel.org/stable/c/01c49eae7c6256f2d8cc08210a2bac3ee070e43a
- https://git.kernel.org/stable/c/14e03ecd3b1b5fc03c082b27a2f8889f8290c30e
- https://git.kernel.org/stable/c/b69ea153d30ce19ca8997eeeca1e2219fae5a29b
- https://git.kernel.org/stable/c/9ae672606c17891d90b282e3490b817620549599
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.