CVE Database›Document archive›CVE-2026-53061

CVE-2026-53061

kernel: dm cache: fix dirty mapping checking in passthrough mode switching

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · June 24, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's device-mapper (dm) cache component. This vulnerability arises from an incorrect assumption that table reloads only occur after suspension, which is violated by Logical Volume Manager (LVM) table preloading. The dirty mapping check for passthrough mode, performed during table creation, fails when metadata updates are ongoing due to preloading. This can lead to dirty mappings being loaded into passthrough mode, potentially resulting in data loss.

Statement

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires privileged local administrative access to configure device-mapper tables and manipulate cache targets. The issue specifically occurs when transitioning an active writeback cache volume into passthrough mode during table preloading operations, allowing dirty mappings to bypass validation checks and leading to data inconsistency. Standard deployments that do not utilize LVM caching or perform dynamic table swaps on cached volumes are not exposed to this flaw.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition