Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-50280— dm cache: fix flushing uninitialized delayed_work on cache_ctr error

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在 cache_ctr 错误时刷新未初始化的delayed_work。

AI Predicted 5.5 Difficulty: Easy EPSS 0.25% · P16

Possible ATT&CK Techniques 1 AI

T1211 · Exploitation for Stealth

Affected Version Matrix 27

VendorProduct Version RangeStatus
Linux Linux 2b17026685a270b2beaf1cdd9857fcedd3505c7e< 40fac0271c7aedf60d81ed8214e80851e5b26312 affected
d2a0b298ebf83ab6236f66788a3541e91ce75a70< d154b333a5667b6c1b213a11a41ad7aaccd10c3d affected
6a3e412c2ab131c54945327a7676b006f000a209< 5a754d3c771280f2d06bf8ab716d6a0d36ca256e affected
6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa< 8cc12dab635333c4ea28e72d7b947be7d0543c2c affected
6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa< aee3ecda73ce13af7c3e556383342b57e6bd0718 affected
6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa< 135496c208ba26fd68cdef10b64ed7a91ac9a7ff affected
034cbc8d3b47a56acd89453c29632a9c117de09d affected
993406104d2b28fe470126a062ad37a1e21e792e affected
… +19 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-50280

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayed_work on cache_ctr error An unexpected WARN_ON from flush_work() may occur when cache creation fails, caused by destroying the uninitialized delayed_work waker in the error path of cache_create(). For example, the warning appears on the superblock checksum error. Reproduce steps: dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 65536 linear /dev/sdc 8192" dmsetup create corig --table "0 524288 linear /dev/sdc 262144" dd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 524288 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0" Kernel logs: (snip) WARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890 Fix by pulling out the cancel_delayed_work_sync() from the constructor's error path. This patch doesn't affect the use-after-free fix for concurrent dm_resume and dm_destroy (commit 6a459d8edbdb ("dm cache: Fix UAF in destroy()")) as cache_dtr is not changed.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在 cache_ctr 错误时刷新未初始化的delayed_work。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 2b17026685a270b2beaf1cdd9857fcedd3505c7e ~ 40fac0271c7aedf60d81ed8214e80851e5b26312 -
Linux Linux 6.2 -

II. Public POCs for CVE-2024-50280

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-50280

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-50280 (2)

Same Patch Batch · Linux · 2024-11-19 · 88 CVEs total

CVE-2024-50286 9.8 CRITICAL ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
CVE-2024-50283 9.8 CRITICAL ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
CVE-2024-50276 9.8 CRITICAL net: vertexcom: mse102x: Fix possible double free of TX skb
CVE-2024-53066 9.8 CRITICAL nfs: Fix KMSAN warning in decode_getfattr_attrs()
CVE-2024-53058 9.4 CRITICAL net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
CVE-2024-53082 8.4 HIGH virtio_net: Add hash_key_length check
CVE-2024-50299 8.2 HIGH sctp: properly validate chunk size in sctp_sf_ootb()
CVE-2024-50293 7.8 HIGH net/smc: do not leave a dangling sk pointer in __smc_create()
CVE-2024-50291 7.8 HIGH media: dvb-core: add missing buffer index check
CVE-2024-50294 7.8 HIGH rxrpc: Fix missing locking causing hanging calls
CVE-2023-52921 7.8 HIGH drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
CVE-2024-50288 7.8 HIGH media: vivid: fix buffer overwrite when using > 32 buffers
CVE-2024-53063 7.8 HIGH media: dvbdev: prevent the risk of out of memory access
CVE-2024-53088 7.8 HIGH i40e: fix race condition by adding filter's intermediate sync state
CVE-2024-53080 7.8 HIGH drm/panthor: Lock XArray when getting entries for the VM
CVE-2024-53079 7.8 HIGH mm/thp: fix deferred split unqueue naming and locking
CVE-2024-53076 7.8 HIGH iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
CVE-2024-53044 7.8 HIGH net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
CVE-2024-50301 7.8 HIGH security/keys: fix slab-out-of-bounds in key_task_permission
CVE-2024-50300 7.8 HIGH regulator: rtq2208: Fix uninitialized use of regulator_config

Showing top 20 of 88 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-50280

No comments yet

Leave a comment