CVE-2025-38066

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for this issue

Description A vulnerability in the Linux kernel has been identified, where a cache device failing to resume due to mapping errors could trigger a BUG ON when reloading cache mappings into an incomplete policy object. This issue can be reproduced by creating a cache metadata with 512 or more cache blocks, simulating data degradation, and attempting to resume the cache device. The vulnerability can cause an unexpected BUG ON while loading cache mappings.

Recommendations For Linux kernel versions prior to the version containing the fix for this issue, consider applying the fix that disallows resume operations for devices that failed the initial attempt to prevent the BUG ON. At the moment, there is no information about a newer version that contains a fix for this vulnerability.