{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"7d4f1d307ac0f4f55cebeb192a90a235aa060ed1","status":"affected","version":"b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b","versionType":"git"},{"lessThan":"1f04b390add2e14c5b36829a0a1529c4eb65a2e1","status":"affected","version":"b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b","versionType":"git"},{"lessThan":"32f8231c81bd45ab92d49b646a154551f7d54f4f","status":"affected","version":"b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b","versionType":"git"},{"lessThan":"f15eaa3801f2f9207dff156f1ab3e7436ce52bb1","status":"affected","version":"b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b","versionType":"git"},{"lessThan":"81f41d989a32458ff3512f6b05458eaf8926579c","status":"affected","version":"b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b","versionType":"git"},{"lessThan":"e72b793ae440f6900fb17a4b8518c707b5cd3e17","status":"affected","version":"b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.0"},{"lessThan":"6.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.40","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-72097","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndm-verity: fix a possible NULL pointer dereference\n\nFix a possible NULL pointer dereference dm_verity_loadpin_is_bdev_trusted\nif the device has no table.","epss":{"date":"2026-11-06","percentile":0.11916,"score":0.00215},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793985577347,"publishedAt":1786773162941,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7d4f1d307ac0f4f55cebeb192a90a235aa060ed1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/1f04b390add2e14c5b36829a0a1529c4eb65a2e1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/32f8231c81bd45ab92d49b646a154551f7d54f4f"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/f15eaa3801f2f9207dff156f1ab3e7436ce52bb1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/81f41d989a32458ff3512f6b05458eaf8926579c"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/e72b793ae440f6900fb17a4b8518c707b5cd3e17"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/1f04b390add2e14c5b36829a0a1529c4eb65a2e1"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/32f8231c81bd45ab92d49b646a154551f7d54f4f"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/7d4f1d307ac0f4f55cebeb192a90a235aa060ed1"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/81f41d989a32458ff3512f6b05458eaf8926579c"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/e72b793ae440f6900fb17a4b8518c707b5cd3e17"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/f15eaa3801f2f9207dff156f1ab3e7436ce52bb1"}],"remediation":[],"revision":"96c4ce5cd509de66360e7e8d1edf652caa3bf752199f6b2e8ca1d4718d65f906","sources":[{"modifiedAt":1793984120346,"name":"CNA: Linux","retrievedAt":1793986041081,"url":"https://www.cve.org/CVERecord?id=CVE-2026-72097"},{"modifiedAt":1793985577347,"name":"NVD","retrievedAt":1793989686855,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72097"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793986079614,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-72097"}],"ssvc":{"assessedAt":1793983899428,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"dm-verity: fix a possible NULL pointer dereference","updatedAt":1793989686855}