CVE-2026-53063

Awaiting Analysis Awaiting Analysis - Queue

dm-cache Write Hang Vulnerability in Linux Kernel

Publication date: 2026-06-24

Last updated on: 2026-07-14

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix write hang in passthrough mode The invalidate_remove() function has incomplete logic for handling write hit bios after cache invalidation. It sets up the remapping for the overwrite_bio but then drops it immediately without submission, causing write operations to hang. Fix by adding a new invalidate_committed() continuation that submits the remapped writes to the cache origin after metadata commit completes, while using the overwrite_endio hook to ensure proper completion sequencing. This maintains existing coherency. Also improve error handling in invalidate_complete() to preserve the original error status instead of using bio_io_error() unconditionally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-24

Last Modified

2026-07-14

Generated

2026-07-15

AI Q&A

2026-06-24

EPSS Evaluated

2026-07-13

NVD

CVE-2026-53063

EUVD

EUVD-2026-38931

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's device mapper cache (dm cache) subsystem, specifically in passthrough mode. The issue is caused by incomplete logic in the invalidate_remove() function when handling write hit bios after cache invalidation. The function sets up remapping for the overwrite_bio but then drops it immediately without submitting it, which causes write operations to hang.

The fix involves adding a new continuation function, invalidate_committed(), which submits the remapped writes to the cache origin after the metadata commit completes. It also uses the overwrite_endio hook to ensure proper completion sequencing and improves error handling to preserve the original error status.

Impact Analysis

This vulnerability can cause write operations to hang in the Linux kernel's dm cache passthrough mode. This means that data writes may not complete properly, potentially leading to system instability, degraded performance, or data loss if write operations are indefinitely stalled.

Mitigation Strategies

The vulnerability is resolved by a fix in the Linux kernel related to the dm cache write hang issue in passthrough mode.

To mitigate this vulnerability, you should update your Linux kernel to a version that includes the fix for this issue.

Hi! I’m here to help you understand CVE-2026-53063. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70