CVE-2026-53319: blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()
In the Linux kernel, the following vulnerability has been resolved:
blk-wbt: remove WARNONONCE from wbtinitenabledefault()
wbtinitenabledefault() uses WARNONONCE to check for failures from wbtalloc() and wbtinit(). However, both are expected failure paths:
- wbtalloc() can return NULL under memory pressure (-ENOMEM) - wbtinit() can fail with -EBUSY if wbt is already registered
syzbot triggers this by injecting memory allocation failures during MTD partition creation via ioctl(BLKPG), causing a spurious warning.
wbtinitenabledefault() is a best-effort initialization called from blkregisterqueue() with a void return type. Failure simply means the disk operates without writeback throttling, which is harmless.
Replace WARNONONCE with plain if-checks, consistent with how wbtsetlat() in the same file already handles these failures. Add a prwarn() for the wbtinit() failure to retain diagnostic information without triggering a full stack trace.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In blk-wbt, replace WARN_ON_ONCE with plain if-checks in wbt_init_enable_default() to match the void return type behavior of blk_register_queue() and avoid spurious warnings/stack traces while keeping best-effort initialization failure paths diagnostic via pr_warn().
Linux kernel blk-wbt WARN_ON_ONCE usage in wbt_init_enable_default() = replace WARN_ON_ONCE with plain if-checks
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53319?
CVE-2026-53319 has a medium severity rating of 5.5 according to the CVSS 3.1 metrics.
What are the potential impacts of CVE-2026-53319?
CVE-2026-53319 can lead to a denial of service due to memory allocation failures in the Linux kernel.
How do I fix CVE-2026-53319?
To fix CVE-2026-53319, update your Linux kernel to a version that includes the patch addressing this vulnerability.
Is CVE-2026-53319 specific to certain versions of the Linux kernel?
Yes, CVE-2026-53319 affects multiple versions of the Linux kernel; users should verify their specific version's vulnerability.
What components are affected by CVE-2026-53319?
CVE-2026-53319 affects the block writeback throttling (blk-wbt) component in the Linux kernel.