PT-2026-52360 · Linux · Linux Kernel

CVE-2026-53265

·

Published

2026-06-25

·

Updated

2026-09-07

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A check-then-act race condition exists in the dm cache policy smq. The smq invalidate mapping() function performs a check on the e->allocated variable outside of the mq->lock critical section. This allows two concurrent invalidators to both observe e->allocated as true. The first invalidator acquires the lock, removes the entry from the queues and hash table, and calls free entry(), which clears e->allocated. The second invalidator then acquires the lock and proceeds using the stale result of the initial check. This sequence can lead to the corruption of SMQ queues or the hash table by attempting to delete an entry already removed, or trigger an allocation check failure in free entry() when the same entry is freed a second time.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

AZL-90977
CVE-2026-53265
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23193-1
SUSE-SU-2026:23194-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:23241-1
SUSE-SU-2026:23244-1
SUSE-SU-2026:3790-1
SUSE-SU-2026:3810-1
USN-8726-1
USN-8727-1

Affected Products

Linux Kernel