-

CVE-2026-72316

dm era: fix NULL pointer dereference in metadata_open()

In the Linux kernel, the following vulnerability has been resolved:

dm era: fix NULL pointer dereference in metadata_open()

metadata_open() returns NULL when kzalloc_obj() fails, but the
caller era_ctr() only checks IS_ERR(md).  Since IS_ERR(NULL)
returns false, the NULL pointer is treated as a valid result
and later assigned to era->md, leading to a NULL pointer
dereference when the metadata is accessed.

Fix this by returning ERR_PTR(-ENOMEM) on allocation failure,
consistent with dm-cache-metadata.c, dm-thin-metadata.c, and
dm-clone-metadata.c which all use ERR_PTR(-ENOMEM) for the
same pattern.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version eec40579d84873dfb7021eb24c50360f073237c5
Version < a705e056c2f3dd067fb2ff414f0537530baa090b
Status affected
Version eec40579d84873dfb7021eb24c50360f073237c5
Version < bd5a80128bdfc93b1cae935a70da000b8c483e6e
Status affected
Version eec40579d84873dfb7021eb24c50360f073237c5
Version < 17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8
Status affected
Version eec40579d84873dfb7021eb24c50360f073237c5
Version < 889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3
Status affected
Version eec40579d84873dfb7021eb24c50360f073237c5
Version < 01c49eae7c6256f2d8cc08210a2bac3ee070e43a
Status affected
Version eec40579d84873dfb7021eb24c50360f073237c5
Version < 14e03ecd3b1b5fc03c082b27a2f8889f8290c30e
Status affected
Version eec40579d84873dfb7021eb24c50360f073237c5
Version < b69ea153d30ce19ca8997eeeca1e2219fae5a29b
Status affected
Version eec40579d84873dfb7021eb24c50360f073237c5
Version < 9ae672606c17891d90b282e3490b817620549599
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.15
Status affected
Version 0
Version < 3.15
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.127
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/a705e056c2f3dd067fb2ff414f0537530baa090b
https://git.kernel.org/stable/c/bd5a80128bdfc93b1cae935a70da000b8c483e6e
https://git.kernel.org/stable/c/17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8
https://git.kernel.org/stable/c/889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3
https://git.kernel.org/stable/c/01c49eae7c6256f2d8cc08210a2bac3ee070e43a
https://git.kernel.org/stable/c/14e03ecd3b1b5fc03c082b27a2f8889f8290c30e
https://git.kernel.org/stable/c/b69ea153d30ce19ca8997eeeca1e2219fae5a29b
https://git.kernel.org/stable/c/9ae672606c17891d90b282e3490b817620549599