CVE-2026-31580
kernel: bcache: fix cached_dev.sb_bio use-after-free and crash
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 24, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's bcache component. This use-after-free vulnerability occurs when a cached device is stopped while an I/O operation, specifically writing to the superblock, is still in progress. This timing issue can lead to the system attempting to access memory that has already been freed, resulting in a system crash and a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition