---
id: CVE-2026-53063
title: 'dm cache: fix write hang in passthrough mode'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dm cache: fix write hang in passthrough mode

  The invalidate_remove() function has incomplete logic for handling write
  hit bios after cache invalidation. It sets up the…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f <
    9fa18d0b981776b190ca4632942a7c2174052b78
  - >-
    Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f <
    ecb10c193cbebf5e6984246a9b4ff1f95d45ed87
  - >-
    Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f <
    64d6519b00be4116d365bd31f33a5e5ce2944c1a
  - >-
    Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f <
    b8ace9e96983abb20ccf39edce8a60f1bb0b83d8
  - >-
    Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f <
    05798d091ebcfb6d68228890e593f209e8ac940d
  - >-
    Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f <
    4ca8b8bd952df7c3ccdc68af9bd3419d0839a04b
  - Linux 4.12
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:17:34.667186Z'
published: '2026-06-24'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:23:57.716Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-53063'
references:
  - url: 'https://git.kernel.org/stable/c/9fa18d0b981776b190ca4632942a7c2174052b78'
  - url: 'https://git.kernel.org/stable/c/ecb10c193cbebf5e6984246a9b4ff1f95d45ed87'
  - url: 'https://git.kernel.org/stable/c/64d6519b00be4116d365bd31f33a5e5ce2944c1a'
  - url: 'https://git.kernel.org/stable/c/b8ace9e96983abb20ccf39edce8a60f1bb0b83d8'
  - url: 'https://git.kernel.org/stable/c/05798d091ebcfb6d68228890e593f209e8ac940d'
  - url: 'https://git.kernel.org/stable/c/4ca8b8bd952df7c3ccdc68af9bd3419d0839a04b'
tags:
  - cve.org
epss: 0.00128
epssPercentile: 0.02469
ingestedAt: '2026-11-06T16:57:43.301Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dm cache: fix write hang in passthrough mode

The invalidate_remove() function has incomplete logic for handling write
hit bios after cache invalidation. It sets up the remapping for the
overwrite_bio but then drops it immediately without submission, causing
write operations to hang.

Fix by adding a new invalidate_committed() continuation that submits
the remapped writes to the cache origin after metadata commit completes,
while using the overwrite_endio hook to ensure proper completion
sequencing. This maintains existing coherency. Also improve error
handling in invalidate_complete() to preserve the original error status
instead of using bio_io_error() unconditionally.

## Affected

- `Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f < 9fa18d0b981776b190ca4632942a7c2174052b78`
- `Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f < ecb10c193cbebf5e6984246a9b4ff1f95d45ed87`
- `Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f < 64d6519b00be4116d365bd31f33a5e5ce2944c1a`
- `Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f < b8ace9e96983abb20ccf39edce8a60f1bb0b83d8`
- `Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f < 05798d091ebcfb6d68228890e593f209e8ac940d`
- `Linux >= b29d4986d0da1a27cd35917cdb433672f5c95d7f < 4ca8b8bd952df7c3ccdc68af9bd3419d0839a04b`
- `Linux 4.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.