CVE-2026-72102

dm_early_create: fix freeing used table on dm_resume failure

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Oct 19, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dm_early_create: fix freeing used table on dm_resume failure

If dm_resume fails, the kernel attempts to free table with dm_table_destroy, but the table was already instantiated with dm_swap_table. This commit skips the call to dm_table_destroy in this case.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-415 Double Free

Affected Products

Product	Versions
LinuxLinux	6bbc923dfcf57d6b97388819a7393835664c7a8e to before 3ba377a47a093cc19647ca7f102acd33a211d472Affected 6bbc923dfcf57d6b97388819a7393835664c7a8e to before 72c3283a2abd60ecef295e02270f22ef1dfccd25Affected 6bbc923dfcf57d6b97388819a7393835664c7a8e to before d6066145347e14db84c35b445e309f095d0d8125Affected 6bbc923dfcf57d6b97388819a7393835664c7a8e to before 259ce9e3fc3a3f8c4e393a2072b8f34302eb4d5aAffected 6bbc923dfcf57d6b97388819a7393835664c7a8e to before 5f6500d44a912d4aed664600966706d76b81d9afAffected 6bbc923dfcf57d6b97388819a7393835664c7a8e to before 92e3c93d60be1f2425738cd66dbadac7d6bc0cd1Affected 6bbc923dfcf57d6b97388819a7393835664c7a8e to before 7d8ed7cb844df21e4d93af11250fb3a5cb861147Affected 6bbc923dfcf57d6b97388819a7393835664c7a8e to before 366665416f20527ff7cad548a32d1ddf23195740Affected
LinuxLinux	5.1Affected before 5.1Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

6bbc923dfcf57d6b97388819a7393835664c7a8e to before 3ba377a47a093cc19647ca7f102acd33a211d472Affected
6bbc923dfcf57d6b97388819a7393835664c7a8e to before 72c3283a2abd60ecef295e02270f22ef1dfccd25Affected
6bbc923dfcf57d6b97388819a7393835664c7a8e to before d6066145347e14db84c35b445e309f095d0d8125Affected
6bbc923dfcf57d6b97388819a7393835664c7a8e to before 259ce9e3fc3a3f8c4e393a2072b8f34302eb4d5aAffected
6bbc923dfcf57d6b97388819a7393835664c7a8e to before 5f6500d44a912d4aed664600966706d76b81d9afAffected
6bbc923dfcf57d6b97388819a7393835664c7a8e to before 92e3c93d60be1f2425738cd66dbadac7d6bc0cd1Affected
6bbc923dfcf57d6b97388819a7393835664c7a8e to before 7d8ed7cb844df21e4d93af11250fb3a5cb861147Affected
6bbc923dfcf57d6b97388819a7393835664c7a8e to before 366665416f20527ff7cad548a32d1ddf23195740Affected

LinuxLinux

5.1Affected
before 5.1Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.