What is CVE-2026-72106?

CVE-2026-72106 is a unscored severity Linux kernel vulnerability. CVE-2026-72106 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-72106?

CVE-2026-72106 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-72106?

Yes, CVE-2026-72106 has been patched. Fixed versions include 6.6.145, 6.12.97, 6.18.40 and others.

Is CVE-2026-72106 actively exploited?

CVE-2026-72106 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-72106

In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in list_version_get_info sizeof(tt->version) is 12 bytes, but the code writes 16 bytes into the output buffer - info->vers->version[0], info->vers->version[1], info->vers->version[2] and info->vers->next. This can cause buffer overflow. Fix this buffer overflow by replacing "sizeof(tt->version)" with "sizeof(struct dm_target_versions)".

Package Linux Kernel

Published 2026-08-15

Last modified 2026-08-15

Patch available

Yes

Affected versions

Fixed in 6.6.145, 6.12.97, 6.18.40, 7.1.5, 7.2-rc3 and their respective stable series.

Fixed in

✓ 6.6.145 6.6.x ✓ 6.12.97 6.12.x ✓ 6.18.40 6.18.x ✓ 7.1.5 7.1.x ✓ 7.2-rc3

References

5 total

Frequently asked questions

What is CVE-2026-72106?

CVE-2026-72106 is a unscored severity Linux kernel vulnerability . CVE-2026-72106 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-72106?

Yes. CVE-2026-72106 has been patched. Fixed versions include 6.6.145, 6.12.97, 6.18.40 and others.
Is CVE-2026-72106 actively exploited?

No. CVE-2026-72106 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.