CVE-2026-93201

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the dm-pcache component where the system fails to validate cache segment IDs retrieved from persistent memory metadata. Specifically, the functions cache pos decode(), cache key decode(), and the last-kset branches of cache replay(), as well as the writeback and GC workers, use these IDs to index the cache->segments[] array without verifying them against cache->n segs. Because the metadata is only protected by a CRC with a fixed public seed, a user with CAP SYS ADMIN privileges who provides the cache device during a table load can control the ID. An out-of-range value can result in an out-of-bounds read and write by creating a wild pcache cache segment pointer that is subsequently dereferenced.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.