CVE-2026-93198
Description
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate the persisted dirty_tail chain at load The writeback worker follows the persisted dirty_tail chain, which is decoded from the cache device independently of the key_tail chain that cache_replay() walks and bounds. A crafted image, whose on-media fields are authenticated only by a crc32c with a fixed seed, can aim dirty_tail at a chain of last ksets that never terminates, so cache_writeback_fn() re-arms itself with no delay forever. Walk the dirty_tail chain once at load with the same hop cap cache_replay() uses and fail the table load with -EIO if it does not reach an end within n_segs hops.
How to fix
- Linux Linux8195cf3f4a82ef49d9b0651c507ed0784caf23fb, 4822a030929e0e77aa380722dc42e3e4c9edd346, 58d620ee9e01d4bdbceaf2ae1450d307a2a9d58b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 ≤ v < 8195cf3f4a82ef49d9b0651c507ed0784caf23fb, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 ≤ v < 4822a030929e0e77aa380722dc42e3e4c9edd346, 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 ≤ v < 58d620ee9e01d4bdbceaf2ae1450d307a2a9d58b, 6.18 | 8195cf3f4a82ef49d9b0651c507ed0784caf23fb, 4822a030929e0e77aa380722dc42e3e4c9edd346, 58d620ee9e01d4bdbceaf2ae1450d307a2a9d58b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.