CVE-2026-53060 addresses a memory leak in the Linux kernel's dm_cache_metadata_abort function. When the root_lock cannot be acquired because the block_manager is read-only, the temporary block_manager created outside the lock is not freed, leading to a memory leak. This condition can be reliably reproduced by reloading a dm-cache table while metadata is read-only, triggering multiple calls to dm_cache_metadata_abort. The leak is also exposed by concurrent metadata_operation_failed calls due to race conditions in cache mode updates. The issue results in unreferenced kernel memory allocations, as confirmed by kmemleak logs.

The vulnerability causes a memory leak in the kernel, which can lead to resource exhaustion and potential denial of service. There is no impact on confidentiality or integrity. The CVSS 3.1 score is 5.5 (medium severity) reflecting local attack vector with low complexity and no user interaction required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid scenarios that reload dm-cache tables while metadata is read-only or cause concurrent metadata operation failures. Monitor kernel memory usage to detect potential leaks related to dm-cache operations.