CVE-2026-72106

CVE-2026-72106

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
12.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dm-ioctl: fix a possible overflow in list_version_get_info

sizeof(tt->version) is 12 bytes, but the code writes 16 bytes into the

output buffer - info->vers->version[0], info->vers->version[1],

info->vers->version[2] and info->vers->next. This can cause buffer

overflow.

Fix this buffer overflow by replacing "sizeof(tt->version)" with

"sizeof(struct dm_target_versions)".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.1th percentile
Published
2026-08-15T10:21Z
References (5)
EPSS history
Timeline
  • 15 AUG 05:52Z
    dm-ioctl: fix a possible overflow in list_version_get_info
    cvelistv5