CVE-2026-72316

A flaw was found in the Linux kernel's device mapper (dm) era target. When the metadata_open() function fails to allocate memory, it returns a NULL pointer. The calling function, era_ctr(), does not correctly validate this return, leading to a NULL pointer dereference when the metadata is accessed. This issue can be triggered by a local attacker, potentially causing a system crash and resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.