LIVE · cybersecurity feed
Live wire
cve recordhigh

CVE-2026-53062

linux · linux kernel

Published
CVSS7.8
Severityhigh
WeaknessCWE-667
ExploitedNot in CISA KEV

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: fix missing locks in invalidating cache blocks In passthrough mode, the policy invalidate_mapping operation is called simultaneously from multiple workers, thus it should be protected by a lock. Otherwise, we might end up with data races on the allocated blocks counter, or even use-after-free issues with internal data structures when doing concurrent writes. Note that the existing FIXME in smq_invalidate_mapping() doesn't affect passthrough mode since migration tasks don't exist there, but would need attention if supporting fast device shrinking via suspend/resume without target reloading. Reproduce

References

← Back to the CVE Tracker

Our coverage of CVE-2026-53062

No stories yet. This page updates automatically when we publish reporting that references CVE-2026-53062.