Impact
The dm‑cache module in the Linux kernel contains a defect in the invalidate_remove() routine that handles write‑hit bios after cache invalidation. The bug causes the module to set up a remapping for an overwrite_bio but then discard it before submitting the write, leaving the operation hanging. This defect does not compromise data confidentiality or integrity but blocks I/O to devices that use dm‑cache in passthrough mode, effectively causing a denial of service through stalled write requests.
Affected Systems
Linux kernel distributions that incorporate the dm‑cache driver without the recent patch commits (identified by the commit references in the advisory). The advisory does not enumerate specific kernel versions, so any unpatched kernel release that includes the dm‑cache driver and admits the historic bug is potentially affected.
Risk and Exploitability
A CVSS score and EPSS value are not published for this vulnerability, and it is not listed in CISA’s KEV catalog. The flaw appears to require a local context where the affected kernel processes write requests through dm‑cache; an attacker with sufficient privileges to induce or observe stalled writes could trigger the denial of service. No public exploit has been reported, but the lack of a known mitigation path for this bug increases the potential impact for unpatched systems.
OpenCVE Enrichment