PT-2026-52360 · Linux · Linux Kernel
CVE-2026-53265
·
Published
2026-06-25
·
Updated
2026-09-07
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A check-then-act race condition exists in the dm cache policy smq. The
smq invalidate mapping() function performs a check on the e->allocated variable outside of the mq->lock critical section. This allows two concurrent invalidators to both observe e->allocated as true. The first invalidator acquires the lock, removes the entry from the queues and hash table, and calls free entry(), which clears e->allocated. The second invalidator then acquires the lock and proceeds using the stale result of the initial check. This sequence can lead to the corruption of SMQ queues or the hash table by attempting to delete an entry already removed, or trigger an allocation check failure in free entry() when the same entry is freed a second time.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel