CVE-2026-53063

dm cache: fix write hang in passthrough mode

MEDIUM
5.5
CVSS Score
Published: June 24, 2026 at 04:30 PM UTC
Updated: July 21, 2026 at 05:49 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix write hang in passthrough mode The invalidate_remove() function has incomplete logic for handling write hit bios after cache invalidation. It sets up the remapping for the overwrite_bio but then drops it immediately without submission, causing write operations to hang. Fix by adding a new invalidate_committed() continuation that submits the remapped writes to the cache origin after metadata commit completes, while using the overwrite_endio hook to ensure proper completion sequencing. This maintains existing coherency. Also improve error handling in invalidate_complete() to preserve the original error status instead of using bio_io_error() unconditionally.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.12 ≤ v < 6.1.1754.12 ≤ v < 6.12.914.12 ≤ v < 6.18.334.12 ≤ v < 6.6.1414.12 ≤ v < 7.0.104.12 ≤ v < 7.16.13 ≤ v < 6.18.336.19 ≤ v < 7.0.106.2 ≤ v < 6.6.1416.7 ≤ v < 6.12.914.12b29d4986d0da1a27cd35917cdb433672f5c95d7f
Vendor states this is fixed in 05798d091ebcfb6d68228890e593f209e8ac940d (fixed)
Vendor states this is fixed in 4ca8b8bd952df7c3ccdc68af9bd3419d0839a04b (fixed)
Vendor states this is fixed in 64d6519b00be4116d365bd31f33a5e5ce2944c1a (fixed)
Vendor states this is fixed in 9fa18d0b981776b190ca4632942a7c2174052b78 (fixed)
Vendor states this is fixed in b8ace9e96983abb20ccf39edce8a60f1bb0b83d8 (fixed)
Vendor states this is fixed in ecb10c193cbebf5e6984246a9b4ff1f95d45ed87 (fixed)
Vendor states this is fixed in 4.12 (unaffected)
Vendor states this is fixed in 6.1.175 (unaffected)
Vendor states this is fixed in 6.12.91 (unaffected)
Vendor states this is fixed in 6.18.33 (unaffected)
Vendor states this is fixed in 6.6.141 (unaffected)
Vendor states this is fixed in 7.0.10 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card