Answer in brief
CVE-2026-72316 records a Unknown severity vulnerability in dm era: fix NULL pointer dereference in metadata_open(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-72316 records a Unknown severity vulnerability in dm era: fix NULL pointer dereference in metadata_open(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=eec40579d84873dfb7021eb24c50360f073237c5 <a705e056c2f3dd067fb2ff414f0537530baa090b || >=eec40579d84873dfb7021eb24c50360f073237c5 <bd5a80128bdfc93b1cae935a70da000b8c483e6e || >=eec40579d84873dfb7021eb24c50360f073237c5 <17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8 || >=eec40579d84873dfb7021eb24c50360f073237c5 <889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3 || >=eec40579d84873dfb7021eb24c50360f073237c5 <01c49eae7c6256f2d8cc08210a2bac3ee070e43a || >=eec40579d84873dfb7021eb24c50360f073237c5 <14e03ecd3b1b5fc03c082b27a2f8889f8290c30e || >=eec40579d84873dfb7021eb24c50360f073237c5 <b69ea153d30ce19ca8997eeeca1e2219fae5a29b || >=eec40579d84873dfb7021eb24c50360f073237c5 <9ae672606c17891d90b282e3490b817620549599 | a705e056c2f3dd067fb2ff414f0537530baa090b, bd5a80128bdfc93b1cae935a70da000b8c483e6e, 17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8, 889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3, 01c49eae7c6256f2d8cc08210a2bac3ee070e43a, 14e03ecd3b1b5fc03c082b27a2f8889f8290c30e, b69ea153d30ce19ca8997eeeca1e2219fae5a29b, 9ae672606c17891d90b282e3490b817620549599 |
| Linux/Linuxgeneric | 3.15 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata_open() metadata_open() returns NULL when kzalloc_obj() fails, but the caller era_ctr() only checks IS_ERR(md). Since IS_ERR(NULL) returns false, the NULL pointer is treated as a valid result and later assigned to era->md, leading to a NULL pointer dereference when the metadata is accessed. Fix this by returning ERR_PTR(-ENOMEM) on allocation failure, consistent with dm-cache-metadata.c, dm-thin-metadata.c, and dm-clone-metadata.c which all use ERR_PTR(-ENOMEM) for the same pattern.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=eec40579d84873dfb7021eb24c50360f073237c5 <a705e056c2f3dd067fb2ff414f0537530baa090b || >=eec40579d84873dfb7021eb24c50360f073237c5 <bd5a80128bdfc93b1cae935a70da000b8c483e6e || >=eec40579d84873dfb7021eb24c50360f073237c5 <17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8 || >=eec40579d84873dfb7021eb24c50360f073237c5 <889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3 || >=eec40579d84873dfb7021eb24c50360f073237c5 <01c49eae7c6256f2d8cc08210a2bac3ee070e43a || >=eec40579d84873dfb7021eb24c50360f073237c5 <14e03ecd3b1b5fc03c082b27a2f8889f8290c30e || >=eec40579d84873dfb7021eb24c50360f073237c5 <b69ea153d30ce19ca8997eeeca1e2219fae5a29b || >=eec40579d84873dfb7021eb24c50360f073237c5 <9ae672606c17891d90b282e3490b817620549599 | a705e056c2f3dd067fb2ff414f0537530baa090b, bd5a80128bdfc93b1cae935a70da000b8c483e6e, 17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8, 889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3, 01c49eae7c6256f2d8cc08210a2bac3ee070e43a, 14e03ecd3b1b5fc03c082b27a2f8889f8290c30e, b69ea153d30ce19ca8997eeeca1e2219fae5a29b, 9ae672606c17891d90b282e3490b817620549599 |
| Linux/Linuxgeneric | 3.15 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata_open() metadata_open() returns NULL when kzalloc_obj() fails, but the caller era_ctr() only checks IS_ERR(md). Since IS_ERR(NULL) returns false, the NULL pointer is treated as a valid result and later assigned to era->md, leading to a NULL pointer dereference when the metadata is accessed. Fix this by returning ERR_PTR(-ENOMEM) on allocation failure, consistent with dm-cache-metadata.c, dm-thin-metadata.c, and dm-clone-metadata.c which all use ERR_PTR(-ENOMEM) for the same pattern.
Quoted source text, attributed separately from HOL analysis.