In the Linux kernel, the following vulnerability has been resolved:
dm cache: fix dirty mapping checking in passthrough mode switching
As mentioned in commit 9b1cc9f251af ("dm cache: share cache-metadata object across inactive and active DM tables"), dm-cache assumed table reload occurs after suspension, while LVM's table preload breaks this assumption. The dirty mapping check for passthrough mode was designed around this assumption and is performed during table creation, causing the check to fail with preload while metadata updates are ongoing. This risks loading dirty mappings into passthrough mode, resulting in data loss.
Reproduce steps:
1. Create a writeback cache with zero migration_threshold to produce dirty mappings
dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 131072 linear /dev/sdc 8192" dmsetup create corig --table "0 262144 linear /dev/sdc 262144" dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 262144 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writeback smq \ 2 migration_threshold 0"
2. Preload a table in passthrough mode
dmsetup reload cache --table "0 262144 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0"
3. Write to the first cache block to make it dirty
fio --filename=/dev/mapper/cache --name=populate --rw=write --bs=4k \ --direct=1 --size=64k
4. Resume the inactive table. Now it's possible to load the dirty block into passthrough mode.
dmsetup resume cache
Fix by moving the checks to the preresume phase to support table preloading. Also remove the unused function dm_cache_metadata_all_clean.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-5.10.258-257.1041Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.209-147.245Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Jul 7, 2026 | Jul 7, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.18-modules-extraUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18-toolsUpgrade kernel6.18-debuginfo-common-aarch64Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade kernel-livepatch-6.18.33-63.124Upgrade kernel6.18-develUpgrade bpftool6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-develUpgrade kernel6.18Upgrade perf6.18Upgrade kernel6.18-debuginfo-common-x86_64Upgrade python3-perf6.18 | Jul 8, 2026 | Jun 24, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 24, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-aws-64k-5.15Upgrade linux-image-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-26.04Upgrade linux-image-raspi-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-gke-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-generic-7.0Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-azureUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-ibm-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-26.04aUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-7.0Upgrade linux-image-gkeop-6.8Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-7.0Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-generic-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-kvmUpgrade linux-image-laptop-23.10Upgrade linux-image-azure-7.0Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-gke-64k-7.0Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-gkeUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtualUpgrade linux-image-realtime-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intelUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-gcp-7.0Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinxUpgrade linux-image-fips-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-azure-fips-5.15Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpae | Jul 20, 2026 | Jun 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub