CVE-2024-50278

Q: What is the severity of CVE-2024-50278?

CVE-2024-50278 has a CVSS score of 7.1 (HIGH). A Linux kernel vulnerability in the dm-cache subsystem allows out-of-bounds memory access when resuming a cache table after expanding the underlying fast device. This affects systems using device-mapper cache targets for storage optimization. Attackers with local access could potentially crash the system or execute arbitrary code.

7.1 HIGH

📋 TL;DR

A Linux kernel vulnerability in the dm-cache subsystem allows out-of-bounds memory access when resuming a cache table after expanding the underlying fast device. This affects systems using device-mapper cache targets for storage optimization. Attackers with local access could potentially crash the system or execute arbitrary code.

💻 Affected Systems

Products:

Linux kernel

Versions: Kernel versions with vulnerable dm-cache implementation (specific versions not provided in CVE, but patches available in stable branches)

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ✅ No

Notes: Only affects systems using device-mapper cache targets. Requires local access and device-mapper configuration privileges.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to system crash, or potential privilege escalation to kernel-level code execution.

🟠

Likely Case

System crash or kernel panic causing denial of service.

🟢

If Mitigated

Limited to local attackers with device-mapper configuration privileges.

🌐 Internet-Facing: LOW - Requires local access and device-mapper configuration privileges.

🏢 Internal Only: MEDIUM - Local users with device-mapper configuration access could exploit this.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires local access and knowledge of device-mapper cache configuration. The provided reproduction steps demonstrate the trigger condition.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patches available in stable kernel branches (commits: 036dd6e3d263, 13ed3624c6ef, 2222b0929d00, 483b7261b35a, c0ade5d98979)

Vendor Advisory: https://git.kernel.org/stable/c/036dd6e3d2638103e0092864577ea1d091466b86

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution's repositories. 2. Reboot system to load new kernel. 3. Verify kernel version matches patched release.

🔧 Temporary Workarounds

Disable dm-cache usage

linux

Avoid using device-mapper cache targets until patched

# Check for active cache targets: dmsetup table | grep cache
# Remove cache targets if not essential

🧯 If You Can't Patch

Restrict device-mapper configuration privileges to trusted administrators only
Monitor for KASAN reports or kernel panics related to dm-cache operations

🔍 How to Verify

Check if Vulnerable:

Check kernel version and if dm-cache is in use: 'dmsetup table | grep cache' and 'uname -r'

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version is updated to include the fix commits, and test cache resume operations

📡 Detection & Monitoring

Log Indicators:

KASAN reports of vmalloc-out-of-bounds in is_dirty_callback
Kernel panic logs related to dm-cache
System logs showing cache resume failures

Network Indicators:

None - local vulnerability only

SIEM Query:

source="kernel" AND ("KASAN" OR "out-of-bounds" OR "dm-cache" OR "cache_preresume")

📊 Metadata

CVE ID: CVE-2024-50278

CVSS v3 Score: 7.1 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE: CWE-125

Published: November 19, 2024

Last Updated: November 3, 2025

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

Disable dm-cache usage

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable:

Check Version:

Verify Fix Applied:

📡 Detection & Monitoring

Log Indicators:

Network Indicators:

SIEM Query:

📊 Metadata

🔗 References

📤 Share & Export

🔗 Related Vulnerabilities