{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.5-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  dm-pcache: reject option groups without values  The pcache target parses optional arguments as name/value pairs.  A table that advertises one optional argument and supplies only a recognized option name, for example \"cache_mode\", reaches parse_cache_opts() with argc == 1.  The parser consumes the name, decrements argc to zero, then calls dm_shift_arg() again for the value. dm_shift_arg() returns NULL when no arguments remain, and the following strcmp() dereferences that NULL pointer.  Check that each recognized option has a value before consuming it.  This keeps valid \"cache_mode writeback\" and \"data_crc true/false\" tables unchanged while making malformed tables fail during target construction with a precise missing-value error.",
  "id": "DEBIAN-CVE-2026-72104",
  "modified": "2026-09-14T16:47:31.382002037Z",
  "published": "2026-08-15T06:21:24.563Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-72104"
    }
  ],
  "upstream": [
    "CVE-2026-72104"
  ]
}