CVE-2026-72106

dm-ioctl: fix a possible overflow in list_version_get_info

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Oct 30, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dm-ioctl: fix a possible overflow in list_version_get_info

sizeof(tt->version) is 12 bytes, but the code writes 16 bytes into the output buffer - info->vers->version[0], info->vers->version[1], info->vers->version[2] and info->vers->next. This can cause buffer overflow.

Fix this buffer overflow by replacing "sizeof(tt->version)" with "sizeof(struct dm_target_versions)".

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3cba74d3fb2c1890ffae019301227d1366f74907Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 29536a9ff146d9bbd618959857ed2e691cda1d21Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e0f5842c4e2a7dbefb52a2dc6711789bc6963e55Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d61c12573ed9768690fdcb2bc38846a1bcb01358Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before df50c24c6447c18886ed126d3d81cc7e155ea8b6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 76c6f845dc0c614304a6e6ee619b552f97cf24b3Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 6.1.191 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3cba74d3fb2c1890ffae019301227d1366f74907Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 29536a9ff146d9bbd618959857ed2e691cda1d21Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e0f5842c4e2a7dbefb52a2dc6711789bc6963e55Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d61c12573ed9768690fdcb2bc38846a1bcb01358Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before df50c24c6447c18886ed126d3d81cc7e155ea8b6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 76c6f845dc0c614304a6e6ee619b552f97cf24b3Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
6.1.191 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.