CVE-2024-50280
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayed_work on cache_ctr error An unexpected WARN_ON from flush_work() may occur when cache creation fails, caused by destroying the uninitialized delayed_work waker in the error path of cache_create(). For example, the warning appears on the superblock checksum error. Reproduce steps: dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 65536 linear /dev/sdc 8192" dmsetup create corig --table "0 524288 linear /dev/sdc 262144" dd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 524288 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0" Kernel logs: (snip) WARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890 Fix by pulling out the cancel_delayed_work_sync() from the constructor's error path. This patch doesn't affect the use-after-free fix for concurrent dm_resume and dm_destroy (commit 6a459d8edbdb ("dm cache: Fix UAF in destroy()")) as cache_dtr is not changed.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2b17026685a270b2beaf1cdd9857fcedd3505c7e | affected | git | 40fac0271c7aedf60d81ed8214e80851e5b26312 | Unavailable | None listed |
| d2a0b298ebf83ab6236f66788a3541e91ce75a70 | affected | git | d154b333a5667b6c1b213a11a41ad7aaccd10c3d | Unavailable | None listed |
| 6a3e412c2ab131c54945327a7676b006f000a209 | affected | git | 5a754d3c771280f2d06bf8ab716d6a0d36ca256e | Unavailable | None listed |
| 6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa | affected | git | 8cc12dab635333c4ea28e72d7b947be7d0543c2c | Unavailable | None listed |
| 6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa | affected | git | aee3ecda73ce13af7c3e556383342b57e6bd0718 | Unavailable | None listed |
| 6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa | affected | git | 135496c208ba26fd68cdef10b64ed7a91ac9a7ff | Unavailable | None listed |
| 034cbc8d3b47a56acd89453c29632a9c117de09d | affected | git | Unavailable | Unavailable | None listed |
| 993406104d2b28fe470126a062ad37a1e21e792e | affected | git | Unavailable | Unavailable | None listed |
| 4d20032dd90664de09f2902a7ea49ae2f7771746 | affected | git | Unavailable | Unavailable | None listed |
| 2f097dfac7579fd84ff98eb1d3acd41d53a485f3 | affected | git | Unavailable | Unavailable | None listed |
| 6ac4f36910764cb510bafc4c3768544f86ca48ca | affected | git | Unavailable | Unavailable | None listed |
| 5.10.163 | affected | semver | 5.10.237 | Unavailable | None listed |
| 5.15.87 | affected | semver | 5.15.181 | Unavailable | None listed |
| 6.1.4 | affected | semver | 6.1.117 | Unavailable | None listed |
| 4.9.337 | affected | semver | 4.10 | Unavailable | None listed |
| 4.14.303 | affected | semver | 4.15 | Unavailable | None listed |
| 4.19.270 | affected | semver | 4.20 | Unavailable | None listed |
| 5.4.229 | affected | semver | 5.5 | Unavailable | None listed |
| 6.0.18 | affected | semver | 6.1 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.2 | Unavailable | None listed |
| 5.10.237 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.181 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.117 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.61 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.11.8 | unaffected | semver | Unavailable | 6.11.* | None listed |
| 6.12 | unaffected | original_commit_for_fix | Unavailable | * | None listed |