CVE-2026-72104

Source
https://cve.org/CVERecord?id=CVE-2026-72104
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72104.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72104
Downstream
Published
2026-08-15T05:52:47.458Z
Modified
2026-08-18T03:31:28.517108788Z
Summary
dm-pcache: reject option groups without values
Details

In the Linux kernel, the following vulnerability has been resolved:

dm-pcache: reject option groups without values

The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode", reaches parsecacheopts() with argc == 1. The parser consumes the name, decrements argc to zero, then calls dmshiftarg() again for the value. dmshift_arg() returns NULL when no arguments remain, and the following strcmp() dereferences that NULL pointer.

Check that each recognized option has a value before consuming it. This keeps valid "cachemode writeback" and "datacrc true/false" tables unchanged while making malformed tables fail during target construction with a precise missing-value error.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72104.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1d57628ff95b32d5cfa8d8f50e07690c161e9cf0
Fixed
1247615aadb74c89c1b2f01a6de7df9dab92ecb3
Fixed
0cbe13fe540330d31e5273bbf8cbd66bc7c9cb5a
Fixed
d9c631e3fbd44246a2be781d26cfacbb9b8ec127

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72104.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72104.json"