The vulnerability lies in the dm‑pcache subsystem of the Linux kernel. A cache key’s logical offset is not validated against the size of the underlying device before being used to index an array of subtree pointers. When an offset lies beyond the array bounds, the rb_insert() operation writes outside the array, corrupting kernel memory. This out‑of‑bounds write can lead to memory corruption that may be leveraged for privilege escalation or denial of service if a malicious key is supplied to the dm‑pcache device. Whether the attacker requires local or elevated privileges is not specified in the CVE data.

All Linux kernel installations that load the dm‑pcache module are affected. The vendor is the Linux kernel project. No specific kernel version is enumerated in the CVE data, so any kernel build that still contains the unguarded dm‑pcache code requires remediation.

The CVSS score is 4.4, indicating a moderate impact, and the EPSS score is below 1 %, showing a low probability of active exploitation. The CVE description does not specify the privileges required to supply a malicious key to the dm‑pcache device. Since the flaw can cause kernel memory corruption, prompt attention is advised.