The bug occurs when the dm-cache subsystem performs a dirty mapping check during table creation, based on an assumption that the table reload will happen after suspend. LVM’s table preload code violates this assumption. As a result, dirty blocks may bypass the check and be loaded into a passthrough table, exposing stale or dirty data through the device. The consequence is data loss and the weakness is a logic flaw that allows incorrect state validation, corresponding to CWE‑682. The classification as CWE‑682 is inferred from the description.

All Linux kernel releases that include the dm-cache subsystem are potentially affected, since a specific kernel version was not provided. The vulnerability applies to the Linux operating system’s device mapper cache component (dm‑cache) at the kernel level. Any configuration that uses dm‑cache passthrough mode might be impacted.

The CVSS score is not listed, and the EPSS score is unavailable, so the precise risk level cannot be quantified from the data. The vulnerability is only exploitable by a privileged user who can create or alter dm‑cache tables; this is inferred from the description and is typically a root or system administrator. The risk is data loss rather than remote code execution. The vulnerability is not listed in CISA’s KEV catalog, indicating no known public exploitation at this time. Attackers would need to trigger the described sequence of cache creation, table preload, data writing, and table suspension, implying a local environment with kernel module control.