Description
In the Linux kernel, the following vulnerability has been resolved:
dm cache policy smq: check allocation under invalidate lock
commit 2d1f7b65f5de ("dm cache policy smq: fix missing locks in
invalidating cache blocks") added mq->lock around the destructive part of
smq_invalidate_mapping(), but left the e->allocated check outside the
critical section.
That leaves a check-then-act race. Two concurrent invalidators can both
observe e->allocated as true before either of them takes mq->lock. The
first invalidator that acquires the lock removes the entry from the
queues and hash table and then calls free_entry(), which clears
e->allocated and puts the entry back on the free list. The second
invalidator can then acquire mq->lock and continue with the stale result
of the unlocked check.
This can corrupt the SMQ queues or hash table by deleting an entry that
is no longer on those structures. It can also hit the allocation check in
free_entry() when the same entry is freed again.
Move the allocation check under mq->lock so the predicate and the
destructive operations are serialized by the same lock.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.10.258 – < 5.10.259, 5.15.209 – < 5.15.210, 6.1.175 – < 6.1.176, 6.6.141 – < 6.6.143, 6.12.91 – < 6.12.94, 6.18.33 – < 6.18.36, 7.0.10 – < 7.0.13 | 5.10.259 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 7.0.13-1 | — |
| Debian 12 | linux | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1032.37 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1101.103 | — |
| Ubuntu 26.04 LTS | linux | 7.0.0-31.31 | USN-8726-1 |
| Ubuntu 26.04 LTS | linux-aws | 7.0.0-1012.12 | USN-8726-1 |
| Ubuntu 26.04 LTS | linux-azure | 7.0.0-1014.14 | USN-8726-4 |
| Ubuntu 26.04 LTS | linux-gcp +1 | 7.0.0-1011.11 | USN-8726-4, USN-8726-1 |
| Ubuntu 26.04 LTS | linux-gke | 7.0.0-1006.7 | USN-8726-1 |
| Ubuntu 26.04 LTS | linux-ibm +2 | 7.0.0-1013.13 | USN-8727-1, USN-8726-3 |
| Ubuntu 26.04 LTS | linux-nvidia | 7.0.0-1018.18 | USN-8760-2 |
| Ubuntu 26.04 LTS | linux-nvidia-bos | 7.0.0-2018.18 | USN-8800-1 |
| Ubuntu 26.04 LTS | linux-raspi | 7.0.0-1019.19 | USN-8726-2 |
| Ubuntu 26.04 LTS | linux-riscv +1 | 7.0.0-31.31.1 | USN-8726-1 |
| Ubuntu 24.04 LTS | linux | 6.8.0-146.146 | USN-8903-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1066.69 | USN-8903-1 |
| Ubuntu 24.04 LTS | linux-aws-7.0 | 7.0.0-1012.12~24.04.1 | USN-8726-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1068.75 | USN-8904-1 |
| Ubuntu 24.04 LTS | linux-gcp +1 | 6.8.0-1070.78 | USN-8905-2, USN-8904-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1065.73 | USN-8903-2 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1051.55 | USN-8903-2 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-31.31~24.04.1 | USN-8726-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1066.67 | USN-8903-2 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-146.146.1 | USN-8903-2 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1064.67 | USN-8903-2 |
| Ubuntu 24.04 LTS | linux-nvidia-7.0 | 7.0.0-1018.18~24.04.1 | USN-8760-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1064.67.1 | USN-8903-2 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1038.42 | USN-9002-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1063.66 | USN-8903-2 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1068.72 | USN-9025-1 |
| Ubuntu 24.04 LTS | linux-riscv +20 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-7.0 | 7.0.0-31.31.1~24.04.1 | — |
| Ubuntu 22.04 LTS | linux | 5.15.0-198.208 | USN-8875-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1117.124 | USN-8875-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1066.69~22.04.1 | USN-8903-1 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1123.132 | USN-8875-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1122.131 | USN-8876-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1068.75~22.04.1 | USN-8904-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1118.128 | USN-8877-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 +1 | 6.8.0-1070.78~22.04.1 | USN-8905-1, USN-8904-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1113.119 | USN-8875-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1100.108 | USN-8875-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-149.149~22.04.1 | USN-9066-1 |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1111.115 | USN-8875-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1066.67~22.04.1 | USN-8906-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1112.118 | USN-8875-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1109.114 | USN-8875-1 |
| Ubuntu 22.04 LTS | linux-lowlatency | 5.15.0-195.205 | USN-8875-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-146.146.1~22.04.1 | USN-8903-2 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1112.113 | USN-8875-2 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1064.67~22.04.1 | USN-8903-2 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1070.72 | USN-8963-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1059.59 | USN-8963-1 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1114.120 | USN-8875-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1067.71~22.04.1 | USN-9025-1 |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1113.116 | USN-9029-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-146.146~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1080.84 | USN-8875-1 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2056.58 | USN-9025-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1061.62 | USN-8903-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1109.111 | USN-8875-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1116.125 | USN-8875-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1061.62~22.04.1 | USN-8903-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1066.69+fips1 | USN-8903-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1069.77+fips1 | USN-8904-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-146.146+fips1 | USN-8903-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1070.78+fips1 | USN-8905-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1117.124+fips1 | USN-8875-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1123.132+fips1 | USN-8875-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-198.208+fips1 | USN-8875-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1118.128+fips1 | USN-8877-1 |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1117.124~20.04.1 | USN-8875-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1123.132~20.04.1 | USN-8875-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1122.131~20.04.1 | USN-8875-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1118.128~20.04.1 | USN-8878-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 | 5.15.0-198.208~20.04.1 | USN-8875-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 +1 | 5.15.0-1111.115~20.04.1 | USN-8875-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1112.118~20.04.1 | USN-8875-1 |
| Ubuntu Pro 20.04 LTS | linux-lowlatency-hwe-5.15 | 5.15.0-195.205~20.04.1 | USN-8875-1 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1070.72~20.04.1 | USN-8963-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1114.120~20.04.1 | USN-8879-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +7 | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.78.1.150700.17.43.2 | SUSE-SU-2026:3790-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.328.1 | SUSE-SU-2026:4282-1 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +8 | 6.12.0-160000.37.1 | SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLES 16.0 | kernel-64kb +8 | 6.12.0-160000.37.1 | SUSE-SU-2026:23237-1, SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | SUSE-SU-2026:23068-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.37.1 | SUSE-SU-2026:23068-1, SUSE-SU-2026:23066-1 |
| SLE Micro 6.1 | kernel-rt +4 | 6.4.0-51.1 | SUSE-SU-2026:23194-1, SUSE-SU-2026:23193-1 |
| SLE Micro 6.0 | kernel-rt +4 | 6.4.0-51.1 | SUSE-SU-2026:23244-1, SUSE-SU-2026:23241-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_19 | 1-150700.1.5.1 | SUSE-SU-2026:3810-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_20 | 1-150700.15.3.2 | SUSE-SU-2026:3790-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.328.1 | SUSE-SU-2026:4282-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_87 | 1-8.5.1 | SUSE-SU-2026:4282-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.72.1 | SUSE-SU-2026:3810-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | openSUSE-SU-2026:21555-1 |
| openSUSE Leap 16.0 | kernel-rt +11 | 6.12.0-160000.37.1 | openSUSE-SU-2026:21555-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.18.36-69.134 | 1:1.0-0.amzn2023 | ALAS2023-2026-1925 |
| Amazon Linux 2023 | perf6.18 +12 | 1:6.18.36-69.134.amzn2023 | ALAS2023-2026-1925 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.143.1-1 | — |
Advisories 43
- USN-9066-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- WID-SEC-2026-2077 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-8875-1 linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8963-1 linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-9025-1 linux-oracle-6.8, linux-raspi, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-9029-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8726-1 linux, linux-aws, linux-aws-7.0, linux-gcp, linux-gke, linux-hwe-7.0, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8726-4 linux-azure, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8879-1 linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-9002-1 linux-nvidia-tegra vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8760-1 linux-nvidia-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8800-1 linux-nvidia-bos vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8760-2 linux-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8875-2 linux-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8878-1 linux-gcp-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8726-3 linux-ibm vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8727-1 linux-oem-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8726-2 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8877-1 linux-gcp, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8903-2 linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8903-1 linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-fips, linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8904-1 linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8905-2 linux-gcp vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8905-1 linux-gcp-6.8, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8906-1 linux-ibm-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8876-1 linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- ICSA-26-295-16 Siemens SIMATIC S7-1500 TM MFP CISA ICS & IT advisories · Oct 22, 2026
- WID-SEC-2026-3891 Siemens SIMATIC S7: Mehrere Schwachstelle BSI CERT-Bund (WID) · Oct 18, 2026
- SSA-784472 SSA-784472: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1 Siemens ProductCERT · Oct 13, 2026
- SUSE-SU-2026:4282-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Sep 23, 2026
- SUSE-SU-2026:3810-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 31, 2026
- SUSE-SU-2026:23244-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 27, 2026
- SUSE-SU-2026:23231-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 27, 2026
- SUSE-SU-2026:23237-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 27, 2026
- SUSE-SU-2026:23241-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 27, 2026
- SUSE-SU-2026:23221-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 27, 2026
- SUSE-SU-2026:3790-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 27, 2026
- SUSE-SU-2026:23193-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 26, 2026
- SUSE-SU-2026:23194-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 26, 2026
- SUSE-SU-2026:23066-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 15, 2026
- SUSE-SU-2026:23068-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 15, 2026
- openSUSE-SU-2026:21555-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 12, 2026
- ALAS2023-2026-1925 Important: kernel6.18 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jul 29, 2026
References
- https://git.kernel.org/stable/c/c242c7af2aecf0b538b8623bdb86b8b441da38d9
- https://git.kernel.org/stable/c/13da856c86fb8c2ccab95034fd77da1bb2c2a17c
- https://git.kernel.org/stable/c/d886945fcb0f8c9dc6b39928d7a96c95c587346c
- https://git.kernel.org/stable/c/b4892561552d671bd8c4da5ebb70e9fbb1ec446e
- https://git.kernel.org/stable/c/03ffe1112ed88bb3a9bd0b971549bf4d64bfc59a
- https://git.kernel.org/stable/c/42ff6774ecd9d7f70d599cb71ff64373a1da4948
- https://git.kernel.org/stable/c/c57570fba24016ec25ec046ab44db39143fb7a64
- https://git.kernel.org/stable/c/d3f0a606b9f278ece8a0df626ded9c4044071235