CVE-2026-72316
Description
In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata_open() metadata_open() returns NULL when kzalloc_obj() fails, but the caller era_ctr() only checks IS_ERR(md). Since IS_ERR(NULL) returns false, the NULL pointer is treated as a valid result and later assigned to era->md, leading to a NULL pointer dereference when the metadata is accessed. Fix this by returning ERR_PTR(-ENOMEM) on allocation failure, consistent with dm-cache-metadata.c, dm-thin-metadata.c, and dm-clone-metadata.c which all use ERR_PTR(-ENOMEM) for the same pattern.
How to fix
- Linux Linuxa705e056c2f3dd067fb2ff414f0537530baa090b, bd5a80128bdfc93b1cae935a70da000b8c483e6e, 17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8, 889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3, 01c49eae7c6256f2d8cc08210a2bac3ee070e43a, 14e03ecd3b1b5fc03c082b27a2f8889f8290c30e, b69ea153d30ce19ca8997eeeca1e2219fae5a29b, 9ae672606c17891d90b282e3490b817620549599 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | eec40579d84873dfb7021eb24c50360f073237c5 ≤ v < a705e056c2f3dd067fb2ff414f0537530baa090b, eec40579d84873dfb7021eb24c50360f073237c5 ≤ v < bd5a80128bdfc93b1cae935a70da000b8c483e6e, eec40579d84873dfb7021eb24c50360f073237c5 ≤ v < 17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8, eec40579d84873dfb7021eb24c50360f073237c5 ≤ v < 889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3, eec40579d84873dfb7021eb24c50360f073237c5 ≤ v < 01c49eae7c6256f2d8cc08210a2bac3ee070e43a, eec40579d84873dfb7021eb24c50360f073237c5 ≤ v < 14e03ecd3b1b5fc03c082b27a2f8889f8290c30e, eec40579d84873dfb7021eb24c50360f073237c5 ≤ v < b69ea153d30ce19ca8997eeeca1e2219fae5a29b, eec40579d84873dfb7021eb24c50360f073237c5 ≤ v < 9ae672606c17891d90b282e3490b817620549599, 3.15 | a705e056c2f3dd067fb2ff414f0537530baa090b, bd5a80128bdfc93b1cae935a70da000b8c483e6e, 17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8, 889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3, 01c49eae7c6256f2d8cc08210a2bac3ee070e43a, 14e03ecd3b1b5fc03c082b27a2f8889f8290c30e, b69ea153d30ce19ca8997eeeca1e2219fae5a29b, 9ae672606c17891d90b282e3490b817620549599 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.