CVE-2023-53765

kernel: dm cache: free background tracker's queued work in btracker_destroy

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 8, 2025

Updated · June 30, 2026

Description

A memory leak was found in the device-mapper cache target in the Linux kernel. The btracker_destroy() function fails to free queued work items from the background tracker before destroying the slab cache. This triggers a BUG when kmem_cache_shutdown() finds objects still remaining.

Statement

The vulnerability manifests during dm-cache device teardown, causing a kernel BUG rather than silent memory corruption. Systems using LVM caching or dm-cache directly are potentially affected during cache device removal.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime