PT-2024-34105 · Linux+7 · Linux Kernel+7
Ming-Hung Tsai
·
Published
2024-11-04
·
Updated
2025-11-18
·
CVE-2024-50279
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to an out-of-bounds access to the dirty bitset when resizing in the dm-cache. This occurs because an index bug in bitset iteration causes the out-of-bounds access when shrinking the fast device. The problem can be reproduced by creating a cache device and then shrinking the fast device to a smaller size, triggering the out-of-bounds access. Technical details include the
cache preresume function and the cache ctr function, which are involved in the bug. The dmsetup command is used to create and manage the cache device.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu