{"id":"CVE-2026-72097","title":"dm-verity: fix a possible NULL pointer dereference","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndm-verity: fix a possible NULL pointer dereference\n\nFix a possible NULL pointer dereference dm_verity_loadpin_is_bdev_trusted\nif the device has no table.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 7d4f1d307ac0f4f55cebeb192a90a235aa060ed1","Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 1f04b390add2e14c5b36829a0a1529c4eb65a2e1","Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 32f8231c81bd45ab92d49b646a154551f7d54f4f","Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < f15eaa3801f2f9207dff156f1ab3e7436ce52bb1","Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 81f41d989a32458ff3512f6b05458eaf8926579c","Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < e72b793ae440f6900fb17a4b8518c707b5cd3e17","Linux 6.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:51:39.428928Z"},"published":"2026-08-15","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:20.346Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72097","references":[{"url":"https://git.kernel.org/stable/c/7d4f1d307ac0f4f55cebeb192a90a235aa060ed1"},{"url":"https://git.kernel.org/stable/c/1f04b390add2e14c5b36829a0a1529c4eb65a2e1"},{"url":"https://git.kernel.org/stable/c/32f8231c81bd45ab92d49b646a154551f7d54f4f"},{"url":"https://git.kernel.org/stable/c/f15eaa3801f2f9207dff156f1ab3e7436ce52bb1"},{"url":"https://git.kernel.org/stable/c/81f41d989a32458ff3512f6b05458eaf8926579c"},{"url":"https://git.kernel.org/stable/c/e72b793ae440f6900fb17a4b8518c707b5cd3e17"}],"tags":["cve.org"],"epss":0.00215,"epssPercentile":0.1191,"ingestedAt":"2026-11-06T18:00:12.596Z","slug":"CVE-2026-72097","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndm-verity: fix a possible NULL pointer dereference\n\nFix a possible NULL pointer dereference dm_verity_loadpin_is_bdev_trusted\nif the device has no table.\n\n## Affected\n\n- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 7d4f1d307ac0f4f55cebeb192a90a235aa060ed1`\n- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 1f04b390add2e14c5b36829a0a1529c4eb65a2e1`\n- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 32f8231c81bd45ab92d49b646a154551f7d54f4f`\n- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < f15eaa3801f2f9207dff156f1ab3e7436ce52bb1`\n- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 81f41d989a32458ff3512f6b05458eaf8926579c`\n- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < e72b793ae440f6900fb17a4b8518c707b5cd3e17`\n- `Linux 6.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}