CVE-2026-72102

Received Received - Intake

dm_early_create dm_resume Failure in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_resume failure If dm_resume fails, the kernel attempts to free table with dm_table_destroy, but the table was already instantiated with dm_swap_table. This commit skips the call to dm_table_destroy in this case.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72102

EUVD

EUVD-2026-59060

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the device mapper (dm) subsystem. When dm_resume fails, the kernel incorrectly tries to free a table that was already in use after being instantiated with dm_swap_table. This can lead to memory corruption or system instability.

Detection Guidance

This vulnerability is specific to the Linux kernel's device mapper (dm) subsystem and requires kernel-level inspection. Detection involves checking kernel logs for dm_resume failures or examining the kernel version for the patched commit. Use commands like 'dmesg | grep dm_resume' or 'uname -a' to verify kernel version and logs.

Impact Analysis

This vulnerability may cause system crashes, data corruption, or unexpected behavior in systems using the Linux kernel's device mapper. It could affect storage management, potentially leading to service disruptions or data loss.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other common standards and regulations. The issue is specific to the Linux kernel's device mapper functionality and involves a failure in error handling during table management. There is no indication that this vulnerability impacts data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel logs for dm_resume failures and ensure device-mapper tables are properly managed.

Hi! I’m here to help you understand CVE-2026-72102. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70