---
id: CVE-2026-72097
title: 'dm-verity: fix a possible NULL pointer dereference'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dm-verity: fix a possible NULL pointer dereference

  Fix a possible NULL pointer dereference dm_verity_loadpin_is_bdev_trusted
  if the device has no table.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b <
    7d4f1d307ac0f4f55cebeb192a90a235aa060ed1
  - >-
    Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b <
    1f04b390add2e14c5b36829a0a1529c4eb65a2e1
  - >-
    Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b <
    32f8231c81bd45ab92d49b646a154551f7d54f4f
  - >-
    Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b <
    f15eaa3801f2f9207dff156f1ab3e7436ce52bb1
  - >-
    Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b <
    81f41d989a32458ff3512f6b05458eaf8926579c
  - >-
    Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b <
    e72b793ae440f6900fb17a4b8518c707b5cd3e17
  - Linux 6.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:51:39.428928Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:20.346Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72097'
references:
  - url: 'https://git.kernel.org/stable/c/7d4f1d307ac0f4f55cebeb192a90a235aa060ed1'
  - url: 'https://git.kernel.org/stable/c/1f04b390add2e14c5b36829a0a1529c4eb65a2e1'
  - url: 'https://git.kernel.org/stable/c/32f8231c81bd45ab92d49b646a154551f7d54f4f'
  - url: 'https://git.kernel.org/stable/c/f15eaa3801f2f9207dff156f1ab3e7436ce52bb1'
  - url: 'https://git.kernel.org/stable/c/81f41d989a32458ff3512f6b05458eaf8926579c'
  - url: 'https://git.kernel.org/stable/c/e72b793ae440f6900fb17a4b8518c707b5cd3e17'
tags:
  - cve.org
epss: 0.00215
epssPercentile: 0.1191
ingestedAt: '2026-11-06T18:00:12.596Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dm-verity: fix a possible NULL pointer dereference

Fix a possible NULL pointer dereference dm_verity_loadpin_is_bdev_trusted
if the device has no table.

## Affected

- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 7d4f1d307ac0f4f55cebeb192a90a235aa060ed1`
- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 1f04b390add2e14c5b36829a0a1529c4eb65a2e1`
- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 32f8231c81bd45ab92d49b646a154551f7d54f4f`
- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < f15eaa3801f2f9207dff156f1ab3e7436ce52bb1`
- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < 81f41d989a32458ff3512f6b05458eaf8926579c`
- `Linux >= b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b < e72b793ae440f6900fb17a4b8518c707b5cd3e17`
- `Linux 6.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.