CVE-2024-50280dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- 7.8HighCVSS base score
- 0.25%Exploitation in 30 daysEPSS · top 83% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayed_work on cache_ctr error An unexpected WARN_ON from flush_work() may occur when cache creation fails, caused by destroying the uninitialized delayed_work waker in the error path of cache_create(). For example, the warning appears on the superblock checksum error. Reproduce steps: dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 65536 linear /dev/sdc 8192" dmsetup create corig --table "0 524288 linear /dev/sdc 262144" dd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 524288 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0" Kernel logs: (snip) WARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890 Fix by pulling out the cancel_delayed_work_sync() from the constructor's error path. This patch doesn't affect the use-after-free fix for concurrent dm_resume and dm_destroy (commit 6a459d8edbdb ("dm cache: Fix UAF in destroy()")) as cache_dtr is not changed.
Timeline
ID reserved
By Linux
- 29 days later
· 29 days later
Published
- 18 months later
· 18 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.25% · top 83% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected 2b17026685a270b2beaf1cdd9857fcedd3505c7e – < 40fac0271c7aedf60d81ed8214e80851e5b26312
- affected d2a0b298ebf83ab6236f66788a3541e91ce75a70 – < d154b333a5667b6c1b213a11a41ad7aaccd10c3d
- affected 6a3e412c2ab131c54945327a7676b006f000a209 – < 5a754d3c771280f2d06bf8ab716d6a0d36ca256e
- affected 6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa – < 8cc12dab635333c4ea28e72d7b947be7d0543c2c
- affected 6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa – < aee3ecda73ce13af7c3e556383342b57e6bd0718
- affected 6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa – < 135496c208ba26fd68cdef10b64ed7a91ac9a7ff
- affected 034cbc8d3b47a56acd89453c29632a9c117de09d
- affected 993406104d2b28fe470126a062ad37a1e21e792e
- affected 4d20032dd90664de09f2902a7ea49ae2f7771746
- affected 2f097dfac7579fd84ff98eb1d3acd41d53a485f3
- affected 6ac4f36910764cb510bafc4c3768544f86ca48ca
- affected 5.10.163 – < 5.10.237
- affected 5.15.87 – < 5.15.181
- affected 6.1.4 – < 6.1.117
- affected 4.9.337 – < 4.10
- affected 4.14.303 – < 4.15
- affected 4.19.270 – < 4.20
- affected 5.4.229 – < 5.5
- affected 6.0.18 – < 6.1
- affected 6.2
- unaffected < 6.2
- unaffected 5.10.237 – ≤ 5.10.*
- unaffected 5.15.181 – ≤ 5.15.*
- unaffected 6.1.117 – ≤ 6.1.*
- unaffected 6.6.61 – ≤ 6.6.*
- unaffected 6.11.8 – ≤ 6.11.*
- unaffected 6.12 – ≤ *
References
References8
- https://git.kernel.org/stable/c/40fac0271c7aedf60d81ed8214e80851e5b26312 (opens in a new tab)
- https://git.kernel.org/stable/c/d154b333a5667b6c1b213a11a41ad7aaccd10c3d (opens in a new tab)
- https://git.kernel.org/stable/c/5a754d3c771280f2d06bf8ab716d6a0d36ca256e (opens in a new tab)
- https://git.kernel.org/stable/c/8cc12dab635333c4ea28e72d7b947be7d0543c2c (opens in a new tab)
- https://git.kernel.org/stable/c/aee3ecda73ce13af7c3e556383342b57e6bd0718 (opens in a new tab)
- https://git.kernel.org/stable/c/135496c208ba26fd68cdef10b64ed7a91ac9a7ff (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-45174 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-50280)Record last updated .