Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53265

In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de ("dm cache policy smq: fix missing locks in invalidating cache blocks") added mq->lock around the destructive part of smq_invalidate_mapping(), but left the e->allocated check outside the critical section. That leaves a check-then-act race. Two concurrent invalidators can both observe e->allocated as true before either of them takes mq->lock. The
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d96dca9ccb4318ff60d2645a80ddeb5c3d6129175edfb16d6e8ee7ed1f5d8f99
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/md/dm-cache-policy-smq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c242c7af2aecf0b538b8623bdb86b8b441da38d9","status":"affected","version":"4991b5a08751e2e82488fb93ae08849b6aea10d9","versionType":"git"},{"lessThan":"13da856c86fb8c2ccab95034fd77da1bb2c2a17c","status":"affected","version":"1b2bec4a7dcf5f00b7a1cbeeec8997841d783513","versionType":"git"},{"lessThan":"d886945fcb0f8c9dc6b39928d7a96c95c587346c","status":"affected","version":"9a5fdfb9e57ec…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/md/dm-cache-policy-smq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5.10.259","status":"affected","version":"5.10.258","versionType":"semver"},{"lessThan":"5.15.210","status":"affected","version":"5.15.209","versionType":"semver"},{"lessThan":"6.1.176","status":"affected","version":"6.1.175","versionType":"semver"},{"lessThan":"6.6.143","status":"affected","version":"6.6.141","versionType":"semver"},{"lessThan":"6.12.94","status":"affected","versio…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/md/dm-cache-policy-smq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c242c7af2aecf0b538b8623bdb86b8b441da38d9","status":"affected","version":"4991b5a08751e2e82488fb93ae08849b6aea10d9","versionType":"git"},{"lessThan":"13da856c86fb8c2ccab95034fd77da1bb2c2a17c","status":"affected","version":"1b2bec4a7dcf5f00b7a1cbeeec8997841d783513","versionType":"git"},{"lessThan":"d886945fcb0f8c9dc6b39928d7a96c95c587346c","status":"affected","version":"9a5fdfb9e57ec…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/affected/0
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/md/dm-cache-policy-smq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5.10.259","status":"affected","version":"5.10.258","versionType":"semver"},{"lessThan":"5.15.210","status":"affected","version":"5.15.209","versionType":"semver"},{"lessThan":"6.1.176","status":"affected","version":"6.1.175","versionType":"semver"},{"lessThan":"6.6.143","status":"affected","version":"6.6.141","versionType":"semver"},{"lessThan":"6.12.94","status":"affected","versio…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/03ffe1112ed88bb3a9bd0b971549bf4d64bfc59a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/13da856c86fb8c2ccab95034fd77da1bb2c2a17c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/42ff6774ecd9d7f70d599cb71ff64373a1da4948"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/b4892561552d671bd8c4da5ebb70e9fbb1ec446e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/c242c7af2aecf0b538b8623bdb86b8b441da38d9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/c57570fba24016ec25ec046ab44db39143fb7a64"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/d3f0a606b9f278ece8a0df626ded9c4044071235"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/d886945fcb0f8c9dc6b39928d7a96c95c587346c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2f7cf82b818375b7f8a2bf277615306a260c22b8ff8dd013009a1b0e01065bf1 · sha256:f46e39b4a3727aec… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer