CVE-2026-53063 Details
Description
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix write hang in passthrough mode The invalidate_remove() function has incomplete logic for handling write hit bios after cache invalidation. It sets up the remapping for the overwrite_bio but then drops it immediately without submission, causing write operations to hang. Fix by adding a new invalidate_committed() continuation that submits the remapped writes to the cache origin after metadata commit completes, while using the overwrite_endio hook to ensure proper completion sequencing. This maintains existing coherency. Also improve error handling in invalidate_complete() to preserve the original error status instead of using bio_io_error() unconditionally.
A vulnerability in the Linux kernel's DM cache module can cause write operations to hang in passthrough mode. This issue arises because the 'invalidate_remove()' function improperly manages write-hit BIOS after cache invalidation. It prepares to remap the overwrite BIOS but fails to submit it, leading to a blockage in write processes. The problem has been addressed by introducing a new 'invalidate_committed()' continuation that sends the remapped writes to the cache origin after the metadata commit is complete. This fix ensures proper completion sequencing and maintains coherence. Additionally, the error handling in 'invalidate_complete()' has been improved to retain the original error status instead of indiscriminately using 'bio_io_error()'.
Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/05798d091ebcfb6d68228890e593f209e8ac940d | kernel.org | Patch |
| https://git.kernel.org/stable/c/4ca8b8bd952df7c3ccdc68af9bd3419d0839a04b | kernel.org | Patch |
| https://git.kernel.org/stable/c/64d6519b00be4116d365bd31f33a5e5ce2944c1a | kernel.org | Patch |
| https://git.kernel.org/stable/c/9fa18d0b981776b190ca4632942a7c2174052b78 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b8ace9e96983abb20ccf39edce8a60f1bb0b83d8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ecb10c193cbebf5e6984246a9b4ff1f95d45ed87 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.12, < 6.1.175 >= 6.2, < 6.6.141 >= 6.7, < 6.12.91 >= 6.13, < 6.18.33 >= 6.19, < 7.0.10 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 21, 2026 | Initial Analysis | [email protected] |
| Jun 24, 2026 | New CVE Received | kernel.org |