CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info
In the Linux kernel, the following vulnerability has been resolved:
dm-ioctl: fix a possible overflow in listversiongetinfo
sizeof(tt->version) is 12 bytes, but the code writes 16 bytes into the output buffer - info->vers->version[0], info->vers->version[1], info->vers->version[2] and info->vers->next. This can cause buffer overflow.
Fix this buffer overflow by replacing "sizeof(tt->version)" with "sizeof(struct dmtargetversions)".
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72106?
The severity of CVE-2026-72106 is rated at 43, indicating a significant potential impact.
How do I fix CVE-2026-72106?
To fix CVE-2026-72106, ensure you are running the updated version of the Linux kernel that has patched the overflow issue.
What type of vulnerability is CVE-2026-72106?
CVE-2026-72106 is identified as a buffer overflow vulnerability in the Linux kernel.
What software is affected by CVE-2026-72106?
CVE-2026-72106 affects the Linux kernel, specifically versions that include the vulnerable dm-ioctl functionality.
When was CVE-2026-72106 published?
CVE-2026-72106 was published on August 15, 2026.