GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-53060 (GCVE-0-2026-53060)

Vulnerability from cvelistv5 – Published: 2026-06-24 16:30 – Updated: 2026-06-24 16:30
VLAI
Title
dm cache metadata: fix memory leak on metadata abort retry
Summary
In the Linux kernel, the following vulnerability has been resolved: dm cache metadata: fix memory leak on metadata abort retry When failing to acquire the root_lock in dm_cache_metadata_abort because the block_manager is read-only, the temporary block_manager created outside the root_lock is not properly released, causing a memory leak. Reproduce steps: This can be reproduced by reloading a new table while the metadata is read-only. While the second call to dm_cache_metadata_abort is caused by lack of support for table preload in dm-cache, mentioned in commit 9b1cc9f251af ("dm cache: share cache-metadata object across inactive and active DM tables"), it exposes the memory leak in dm_cache_metadata_abort when the function is called multiple times. Specifically, dm-cache fails to sync the new cache object's mode during preresume, creating the reproducer condition. This issue could also occur through concurrent metadata_operation_failed calls due to races in cache mode updates, but the table preload scenario below provides a reliable reproducer. 1. Create a cache device with some faulty trailing metadata blocks dmsetup create cmeta <<EOF 0 200 linear /dev/sdc 0 200 7992 error EOF dmsetup create cdata --table "0 131072 linear /dev/sdc 8192" dmsetup create corig --table "0 262144 linear /dev/sdc 262144" dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 131072 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 1 writethrough smq 0" 2. Suspend and resume the cache to start a new metadata transaction and trigger metadata io errors on the next metadata commit. dmsetup suspend cache dmsetup resume cache 3. Write to the cache device to update metadata fio --filename=/dev/mapper/cache --name test --rw=randwrite --bs=4k \ --randrepeat=0 --direct=1 --size 64k 4. Preload the same table dmsetup reload cache --table "$(dmsetup table cache)" 5. Resume the new table. This triggers the memory leak. dmsetup suspend cache dmsetup resume cache kmemleak logs: <snip> unreferenced object 0xffff8880080c2010 (size 16): comm "dmsetup", pid 132, jiffies 4294982580 hex dump (first 16 bytes): 00 38 b9 07 80 88 ff ff 6a 6b 6b 6b 6b 6b 6b a5 ... backtrace (crc 3118f31c): kmemleak_alloc+0x28/0x40 __kmalloc_cache_noprof+0x3d9/0x510 dm_block_manager_create+0x51/0x140 dm_cache_metadata_abort+0x85/0x320 metadata_operation_failed+0x103/0x1e0 cache_preresume+0xacd/0xe70 dm_table_resume_targets+0xd3/0x320 __dm_resume+0x1b/0xf0 dm_resume+0x127/0x170 <snip>
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: b45e77b79215405bd039a690f5b06cc03e8ed27d , < 14f60e957f34f95a626caec76a8fae88cf4c397f (git)
Affected: 28d307f380df88a598bc0186d527462902d9bda1 , < 6b97cc7a42905755c56bbddc33aa8b792205caee (git)
Affected: f74b7c5a85e22cd9091845e0d62a1dd89d0f855f , < d1a79620c419a0af1911f99c873014b30740e303 (git)
Affected: 352b837a5541690d4f843819028cf2b8be83d424 , < 15c30997dca681f90dbf2d45ee629c1828bf0c0d (git)
Affected: 352b837a5541690d4f843819028cf2b8be83d424 , < b0bd35535bdb6f58505f3a30ee5793986943997a (git)
Affected: 352b837a5541690d4f843819028cf2b8be83d424 , < 322a3b70368d49e39591fe9fc6c07d262128b05f (git)
Affected: 352b837a5541690d4f843819028cf2b8be83d424 , < 4311ca59a1891d33c4c8b7946f98c34f167fe833 (git)
Affected: 352b837a5541690d4f843819028cf2b8be83d424 , < 044ca491d4086dc5bf233e9fcb71db52df32f633 (git)
Affected: 6e237cacda8b4e976849e7bff9fe7dff0e968586 (git)
Affected: 3972ae47d0ee9b5b434af5d0cca6cdfd1e239d4f (git)
Affected: 9958f5ffc44530b650fb4cc9038a4d167fa4f5c1 (git)
Affected: f472bfc95d9c9653172dbdad39219b32fabf9b92 (git)
Affected: bdd4e106929ac943f3226d8f03754b480701e97b (git)
Affected: 5.10.163 , < 5.10.258 (semver)
Affected: 5.15.87 , < 5.15.209 (semver)
Affected: 6.1.4 , < 6.1.175 (semver)
Affected: 4.9.337 , < 4.10 (semver)
Affected: 4.14.303 , < 4.15 (semver)
Affected: 4.19.270 , < 4.20 (semver)
Affected: 5.4.229 , < 5.5 (semver)
Affected: 6.0.18 , < 6.1 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.2
Unaffected: 0 , < 6.2 (semver)
Unaffected: 5.10.258 , ≤ 5.10.* (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.141 , ≤ 6.6.* (semver)
Unaffected: 6.12.91 , ≤ 6.12.* (semver)
Unaffected: 6.18.33 , ≤ 6.18.* (semver)
Unaffected: 7.0.10 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/md/dm-cache-metadata.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "14f60e957f34f95a626caec76a8fae88cf4c397f",
              "status": "affected",
              "version": "b45e77b79215405bd039a690f5b06cc03e8ed27d",
              "versionType": "git"
            },
            {
              "lessThan": "6b97cc7a42905755c56bbddc33aa8b792205caee",
              "status": "affected",
              "version": "28d307f380df88a598bc0186d527462902d9bda1",
              "versionType": "git"
            },
            {
              "lessThan": "d1a79620c419a0af1911f99c873014b30740e303",
              "status": "affected",
              "version": "f74b7c5a85e22cd9091845e0d62a1dd89d0f855f",
              "versionType": "git"
            },
            {
              "lessThan": "15c30997dca681f90dbf2d45ee629c1828bf0c0d",
              "status": "affected",
              "version": "352b837a5541690d4f843819028cf2b8be83d424",
              "versionType": "git"
            },
            {
              "lessThan": "b0bd35535bdb6f58505f3a30ee5793986943997a",
              "status": "affected",
              "version": "352b837a5541690d4f843819028cf2b8be83d424",
              "versionType": "git"
            },
            {
              "lessThan": "322a3b70368d49e39591fe9fc6c07d262128b05f",
              "status": "affected",
              "version": "352b837a5541690d4f843819028cf2b8be83d424",
              "versionType": "git"
            },
            {
              "lessThan": "4311ca59a1891d33c4c8b7946f98c34f167fe833",
              "status": "affected",
              "version": "352b837a5541690d4f843819028cf2b8be83d424",
              "versionType": "git"
            },
            {
              "lessThan": "044ca491d4086dc5bf233e9fcb71db52df32f633",
              "status": "affected",
              "version": "352b837a5541690d4f843819028cf2b8be83d424",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "6e237cacda8b4e976849e7bff9fe7dff0e968586",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "3972ae47d0ee9b5b434af5d0cca6cdfd1e239d4f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "9958f5ffc44530b650fb4cc9038a4d167fa4f5c1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f472bfc95d9c9653172dbdad39219b32fabf9b92",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "bdd4e106929ac943f3226d8f03754b480701e97b",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.258",
              "status": "affected",
              "version": "5.10.163",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.209",
              "status": "affected",
              "version": "5.15.87",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.175",
              "status": "affected",
              "version": "6.1.4",
              "versionType": "semver"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.337",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.303",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.270",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1",
              "status": "affected",
              "version": "6.0.18",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/md/dm-cache-metadata.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.2"
            },
            {
              "lessThan": "6.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.141",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.91",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.33",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "5.10.163",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "5.15.87",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "6.1.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.141",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.91",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.33",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.10",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.337",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.303",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.270",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.229",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.0.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache metadata: fix memory leak on metadata abort retry\n\nWhen failing to acquire the root_lock in dm_cache_metadata_abort because\nthe block_manager is read-only, the temporary block_manager created\noutside the root_lock is not properly released, causing a memory leak.\n\nReproduce steps:\n\nThis can be reproduced by reloading a new table while the metadata\nis read-only. While the second call to dm_cache_metadata_abort is\ncaused by lack of support for table preload in dm-cache, mentioned\nin commit 9b1cc9f251af (\"dm cache: share cache-metadata object across\ninactive and active DM tables\"), it exposes the memory leak in\ndm_cache_metadata_abort when the function is called multiple times.\nSpecifically, dm-cache fails to sync the new cache object\u0027s mode during\npreresume, creating the reproducer condition.\n\nThis issue could also occur through concurrent metadata_operation_failed\ncalls due to races in cache mode updates, but the table preload scenario\nbelow provides a reliable reproducer.\n\n1. Create a cache device with some faulty trailing metadata blocks\n\ndmsetup create cmeta \u003c\u003cEOF\n0 200 linear /dev/sdc 0\n200 7992 error\nEOF\ndmsetup create cdata --table \"0 131072 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 262144 linear /dev/sdc 262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\ndmsetup create cache --table \"0 131072 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 1 writethrough smq 0\"\n\n2. Suspend and resume the cache to start a new metadata transaction and\n   trigger metadata io errors on the next metadata commit.\n\ndmsetup suspend cache\ndmsetup resume cache\n\n3. Write to the cache device to update metadata\n\nfio --filename=/dev/mapper/cache --name test --rw=randwrite --bs=4k \\\n--randrepeat=0 --direct=1 --size 64k\n\n4. Preload the same table\n\ndmsetup reload cache --table \"$(dmsetup table cache)\"\n\n5. Resume the new table. This triggers the memory leak.\n\ndmsetup suspend cache\ndmsetup resume cache\n\nkmemleak logs:\n\n\u003csnip\u003e\nunreferenced object 0xffff8880080c2010 (size 16):\n  comm \"dmsetup\", pid 132, jiffies 4294982580\n  hex dump (first 16 bytes):\n    00 38 b9 07 80 88 ff ff 6a 6b 6b 6b 6b 6b 6b a5 ...\n  backtrace (crc 3118f31c):\n    kmemleak_alloc+0x28/0x40\n    __kmalloc_cache_noprof+0x3d9/0x510\n    dm_block_manager_create+0x51/0x140\n    dm_cache_metadata_abort+0x85/0x320\n    metadata_operation_failed+0x103/0x1e0\n    cache_preresume+0xacd/0xe70\n    dm_table_resume_targets+0xd3/0x320\n    __dm_resume+0x1b/0xf0\n    dm_resume+0x127/0x170\n\u003csnip\u003e"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-24T16:30:04.872Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/14f60e957f34f95a626caec76a8fae88cf4c397f"
        },
        {
          "url": "https://git.kernel.org/stable/c/6b97cc7a42905755c56bbddc33aa8b792205caee"
        },
        {
          "url": "https://git.kernel.org/stable/c/d1a79620c419a0af1911f99c873014b30740e303"
        },
        {
          "url": "https://git.kernel.org/stable/c/15c30997dca681f90dbf2d45ee629c1828bf0c0d"
        },
        {
          "url": "https://git.kernel.org/stable/c/b0bd35535bdb6f58505f3a30ee5793986943997a"
        },
        {
          "url": "https://git.kernel.org/stable/c/322a3b70368d49e39591fe9fc6c07d262128b05f"
        },
        {
          "url": "https://git.kernel.org/stable/c/4311ca59a1891d33c4c8b7946f98c34f167fe833"
        },
        {
          "url": "https://git.kernel.org/stable/c/044ca491d4086dc5bf233e9fcb71db52df32f633"
        }
      ],
      "title": "dm cache metadata: fix memory leak on metadata abort retry",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-53060",
    "datePublished": "2026-06-24T16:30:04.872Z",
    "dateReserved": "2026-06-09T07:44:35.382Z",
    "dateUpdated": "2026-06-24T16:30:04.872Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-53060",
      "date": "2026-09-16",
      "epss": "0.00128",
      "percentile": "0.02804"
    },
    "microsoft_vex": {
      "current_release_date": "2026-07-09T14:44:58.000Z",
      "cve": "CVE-2026-53060",
      "id": "msrc_CVE-2026-53060",
      "initial_release_date": "2026-06-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "dm cache metadata: fix memory leak on metadata abort retry",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-53060.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-53060\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-06-24T17:17:18.717\",\"lastModified\":\"2026-07-21T17:35:54.607\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndm cache metadata: fix memory leak on metadata abort retry\\n\\nWhen failing to acquire the root_lock in dm_cache_metadata_abort because\\nthe block_manager is read-only, the temporary block_manager created\\noutside the root_lock is not properly released, causing a memory leak.\\n\\nReproduce steps:\\n\\nThis can be reproduced by reloading a new table while the metadata\\nis read-only. While the second call to dm_cache_metadata_abort is\\ncaused by lack of support for table preload in dm-cache, mentioned\\nin commit 9b1cc9f251af (\\\"dm cache: share cache-metadata object across\\ninactive and active DM tables\\\"), it exposes the memory leak in\\ndm_cache_metadata_abort when the function is called multiple times.\\nSpecifically, dm-cache fails to sync the new cache object\u0027s mode during\\npreresume, creating the reproducer condition.\\n\\nThis issue could also occur through concurrent metadata_operation_failed\\ncalls due to races in cache mode updates, but the table preload scenario\\nbelow provides a reliable reproducer.\\n\\n1. Create a cache device with some faulty trailing metadata blocks\\n\\ndmsetup create cmeta \u003c\u003cEOF\\n0 200 linear /dev/sdc 0\\n200 7992 error\\nEOF\\ndmsetup create cdata --table \\\"0 131072 linear /dev/sdc 8192\\\"\\ndmsetup create corig --table \\\"0 262144 linear /dev/sdc 262144\\\"\\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\\ndmsetup create cache --table \\\"0 131072 cache /dev/mapper/cmeta \\\\\\n/dev/mapper/cdata /dev/mapper/corig 128 1 writethrough smq 0\\\"\\n\\n2. Suspend and resume the cache to start a new metadata transaction and\\n   trigger metadata io errors on the next metadata commit.\\n\\ndmsetup suspend cache\\ndmsetup resume cache\\n\\n3. Write to the cache device to update metadata\\n\\nfio --filename=/dev/mapper/cache --name test --rw=randwrite --bs=4k \\\\\\n--randrepeat=0 --direct=1 --size 64k\\n\\n4. Preload the same table\\n\\ndmsetup reload cache --table \\\"$(dmsetup table cache)\\\"\\n\\n5. Resume the new table. This triggers the memory leak.\\n\\ndmsetup suspend cache\\ndmsetup resume cache\\n\\nkmemleak logs:\\n\\n\u003csnip\u003e\\nunreferenced object 0xffff8880080c2010 (size 16):\\n  comm \\\"dmsetup\\\", pid 132, jiffies 4294982580\\n  hex dump (first 16 bytes):\\n    00 38 b9 07 80 88 ff ff 6a 6b 6b 6b 6b 6b 6b a5 ...\\n  backtrace (crc 3118f31c):\\n    kmemleak_alloc+0x28/0x40\\n    __kmalloc_cache_noprof+0x3d9/0x510\\n    dm_block_manager_create+0x51/0x140\\n    dm_cache_metadata_abort+0x85/0x320\\n    metadata_operation_failed+0x103/0x1e0\\n    cache_preresume+0xacd/0xe70\\n    dm_table_resume_targets+0xd3/0x320\\n    __dm_resume+0x1b/0xf0\\n    dm_resume+0x127/0x170\\n\u003csnip\u003e\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/md/dm-cache-metadata.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"b45e77b79215405bd039a690f5b06cc03e8ed27d\",\"lessThan\":\"14f60e957f34f95a626caec76a8fae88cf4c397f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"28d307f380df88a598bc0186d527462902d9bda1\",\"lessThan\":\"6b97cc7a42905755c56bbddc33aa8b792205caee\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f74b7c5a85e22cd9091845e0d62a1dd89d0f855f\",\"lessThan\":\"d1a79620c419a0af1911f99c873014b30740e303\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"352b837a5541690d4f843819028cf2b8be83d424\",\"lessThan\":\"15c30997dca681f90dbf2d45ee629c1828bf0c0d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"352b837a5541690d4f843819028cf2b8be83d424\",\"lessThan\":\"b0bd35535bdb6f58505f3a30ee5793986943997a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"352b837a5541690d4f843819028cf2b8be83d424\",\"lessThan\":\"322a3b70368d49e39591fe9fc6c07d262128b05f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"352b837a5541690d4f843819028cf2b8be83d424\",\"lessThan\":\"4311ca59a1891d33c4c8b7946f98c34f167fe833\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"352b837a5541690d4f843819028cf2b8be83d424\",\"lessThan\":\"044ca491d4086dc5bf233e9fcb71db52df32f633\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6e237cacda8b4e976849e7bff9fe7dff0e968586\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3972ae47d0ee9b5b434af5d0cca6cdfd1e239d4f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9958f5ffc44530b650fb4cc9038a4d167fa4f5c1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f472bfc95d9c9653172dbdad39219b32fabf9b92\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bdd4e106929ac943f3226d8f03754b480701e97b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.10.163\",\"lessThan\":\"5.10.258\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.15.87\",\"lessThan\":\"5.15.209\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.4\",\"lessThan\":\"6.1.175\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.9.337\",\"lessThan\":\"4.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.14.303\",\"lessThan\":\"4.15\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.19.270\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.4.229\",\"lessThan\":\"5.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.0.18\",\"lessThan\":\"6.1\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/md/dm-cache-metadata.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.2\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.2\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.258\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.141\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.91\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.33\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.10\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-401\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.9.337\",\"versionEndExcluding\":\"4.10\",\"matchCriteriaId\":\"0C8C5100-ECF6-4F64-9489-EFC7923A7591\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.14.303\",\"versionEndExcluding\":\"4.15\",\"matchCriteriaId\":\"68B456F6-323E-4372-A707-523AAA068DF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.19.270\",\"versionEndExcluding\":\"4.20\",\"matchCriteriaId\":\"C08F8902-A527-4C5E-A1BC-1DA79FBF4CB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.4.229\",\"versionEndExcluding\":\"5.5\",\"matchCriteriaId\":\"591759E0-9179-476B-B922-DD6AA7773219\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.10.163\",\"versionEndExcluding\":\"5.10.258\",\"matchCriteriaId\":\"0FCE2AF6-9CBE-4A2B-AA5E-6DD38A11E227\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15.87\",\"versionEndExcluding\":\"5.15.209\",\"matchCriteriaId\":\"D3315E23-4DF4-4D9F-B6AB-9861B4BB66D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0.18\",\"versionEndExcluding\":\"6.1\",\"matchCriteriaId\":\"33CA909F-C234-4F7C-912A-856CD6266004\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.4\",\"versionEndExcluding\":\"6.1.175\",\"matchCriteriaId\":\"31D4D341-50D6-4572-9BF0-2C09121E8660\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.141\",\"matchCriteriaId\":\"97A9FFFA-22BB-4D5C-9790-5A2286E392F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.91\",\"matchCriteriaId\":\"C918746B-DE6F-448F-A93E-A04C5481688D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.33\",\"matchCriteriaId\":\"96D99E49-380D-43AB-BDBA-25C3AD018A9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.10\",\"matchCriteriaId\":\"A13475D2-59BF-4716-94B5-7C1D239A2CF4\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/044ca491d4086dc5bf233e9fcb71db52df32f633\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/14f60e957f34f95a626caec76a8fae88cf4c397f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/15c30997dca681f90dbf2d45ee629c1828bf0c0d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/322a3b70368d49e39591fe9fc6c07d262128b05f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4311ca59a1891d33c4c8b7946f98c34f167fe833\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6b97cc7a42905755c56bbddc33aa8b792205caee\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b0bd35535bdb6f58505f3a30ee5793986943997a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d1a79620c419a0af1911f99c873014b30740e303\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-07-21T17:45:46+00:00",
      "cve": "CVE-2026-53060",
      "id": "CVE-2026-53060",
      "initial_release_date": "2026-06-24T00:00:00+00:00",
      "product_status:known_affected": "232",
      "product_status:known_not_affected": "42",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: dm cache metadata: fix memory leak on metadata abort retry",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53060.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-10T16:59:02Z",
      "cve": "CVE-2026-53060",
      "id": "CVE-2026-53060",
      "initial_release_date": "2026-06-26T02:12:55Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "558",
      "product_status:known_not_affected": "91",
      "product_status:recommended": "273",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-53060",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-53060.json",
      "version": "17"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.