CVE-2026-72106

A flaw was found in the dm-ioctl component of the Linux kernel. This vulnerability, a buffer overflow, occurs in the list_version_get_info function when the code attempts to write more data than the allocated buffer size. A local attacker could potentially exploit this to cause a denial of service or achieve privilege escalation.

This vulnerability is rated as Moderate severity rather than Important because exploitation requires local access and the ability to interact with the Device Mapper control interface, limiting the blast radius primarily to denial of service. By default on Red Hat Enterprise Linux, access to the device-mapper control character device is restricted to privileged administrative accounts. Consequently, unprivileged local users cannot trigger this out-of-bounds write under standard system configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.