CVE-2026-53061
kernel: dm cache: fix dirty mapping checking in passthrough mode switching
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 24, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's device-mapper (dm) cache component. This vulnerability arises from an incorrect assumption that table reloads only occur after suspension, which is violated by Logical Volume Manager (LVM) table preloading. The dirty mapping check for passthrough mode, performed during table creation, fails when metadata updates are ongoing due to preloading. This can lead to dirty mappings being loaded into passthrough mode, potentially resulting in data loss.
Statement
This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires privileged local administrative access to configure device-mapper tables and manipulate cache targets. The issue specifically occurs when transitioning an active writeback cache volume into passthrough mode during table preloading operations, allowing dirty mappings to bypass validation checks and leading to data inconsistency. Standard deployments that do not utilize LVM caching or perform dynamic table swaps on cached volumes are not exposed to this flaw.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition