In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata_open() metadata_open() returns NULL when kzalloc_obj() fails, but the caller era_ctr() only checks IS_ERR(md). Since IS_ERR(NULL) returns false, the NULL pointer is treated as a valid result and later assigned to era->md, leading to a NULL pointer dereference when the metadata is accessed. Fix this by returning ERR_PTR(-ENOMEM) on allocation failure, consistent with dm-cache-metadata.c, dm-thin-metadata.c, and dm-clone-metadata.c which all use ERR_PTR(-ENOMEM) for the same pattern.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/01c49eae7c6256f2d8cc08210a2bac3ee070e43a cve-icon cve-icon
https://git.kernel.org/stable/c/14e03ecd3b1b5fc03c082b27a2f8889f8290c30e cve-icon cve-icon
https://git.kernel.org/stable/c/17eb2ab13edd0b06ce6f996c5fd450d7efabb2e8 cve-icon cve-icon
https://git.kernel.org/stable/c/889374b8e4a60d13fe4a5a8ae3a311ca93d1a2c3 cve-icon cve-icon
https://git.kernel.org/stable/c/9ae672606c17891d90b282e3490b817620549599 cve-icon cve-icon
https://git.kernel.org/stable/c/a705e056c2f3dd067fb2ff414f0537530baa090b cve-icon cve-icon
https://git.kernel.org/stable/c/b69ea153d30ce19ca8997eeeca1e2219fae5a29b cve-icon cve-icon
https://git.kernel.org/stable/c/bd5a80128bdfc93b1cae935a70da000b8c483e6e cve-icon cve-icon
History

Sat, 15 Aug 2026 20:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata_open() metadata_open() returns NULL when kzalloc_obj() fails, but the caller era_ctr() only checks IS_ERR(md). Since IS_ERR(NULL) returns false, the NULL pointer is treated as a valid result and later assigned to era->md, leading to a NULL pointer dereference when the metadata is accessed. Fix this by returning ERR_PTR(-ENOMEM) on allocation failure, consistent with dm-cache-metadata.c, dm-thin-metadata.c, and dm-clone-metadata.c which all use ERR_PTR(-ENOMEM) for the same pattern.
Title dm era: fix NULL pointer dereference in metadata_open()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:55:30.399Z

Updated: 2026-08-15T05:55:30.399Z

Reserved: 2026-08-09T03:40:39.919Z

Link: CVE-2026-72316

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:04.503

Modified: 2026-08-15T06:22:04.503

Link: CVE-2026-72316

cve-icon Redhat

No data.