CVE-2024-50280

7.8 HIGH

📋 TL;DR

This vulnerability in the Linux kernel's dm-cache subsystem causes a kernel warning when cache creation fails, due to improper cleanup of uninitialized delayed work. It affects systems using device-mapper cache targets. The issue can lead to system instability or denial of service.

💻 Affected Systems

Products:

Linux kernel

Versions: Specific kernel versions containing the vulnerable dm-cache code (check git commits for exact ranges)

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ✅ No

Notes: Only affects systems using device-mapper cache targets (dm-cache). Systems not using dm-cache are not vulnerable.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic or system crash due to WARN_ON triggering under specific error conditions, causing denial of service.

🟠

Likely Case

Kernel warning messages in logs during failed cache creation attempts, potentially causing system instability.

🟢

If Mitigated

Minor performance impact during cache creation failures with proper error handling.

🌐 Internet-Facing: LOW - Requires local access and specific device-mapper operations.

🏢 Internal Only: MEDIUM - Affects systems using dm-cache for storage optimization, could impact production systems during cache setup failures.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: NO

Unauthenticated Exploit: ✅ No

Complexity: HIGH

Exploitation requires local access and ability to create/modify dm-cache devices. Triggered by specific error conditions during cache creation.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Kernel versions containing commits: 135496c208ba26fd68cdef10b64ed7a91ac9a7ff, 40fac0271c7aedf60d81ed8214e80851e5b26312, 5a754d3c771280f2d06bf8ab716d6a0d36ca256e, 8cc12dab635333c4ea28e72d7b947be7d0543c2c, aee3ecda73ce13af7c3e556383342b57e6bd0718

Vendor Advisory: https://git.kernel.org/stable/c/135496c208ba26fd68cdef10b64ed7a91ac9a7ff

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version. 2. Check distribution-specific security advisories. 3. Reboot system after kernel update.

🔧 Temporary Workarounds

Disable dm-cache usage

linux

Avoid using device-mapper cache targets until patched

# Do not create dm-cache devices
# Remove existing cache devices: dmsetup remove cache_device_name

🧯 If You Can't Patch

Monitor kernel logs for WARN_ON messages related to dm-cache
Restrict user permissions to prevent dm-cache device creation

🔍 How to Verify

Check if Vulnerable:

Check kernel version and if dm-cache module is loaded: lsmod | grep dm_cache

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version includes the fix commits, check that dm-cache operations complete without WARN_ON messages

📡 Detection & Monitoring

Log Indicators:

WARNING: CPU: ... at kernel/workqueue.c:4178 __flush_work
dm-cache related error messages during device creation

Network Indicators:

None - local vulnerability only

SIEM Query:

kernel_logs WARN* AND (workqueue OR dm_cache OR __flush_work)

📊 Metadata

CVE ID: CVE-2024-50280

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-416

Published: November 19, 2024

Last Updated: November 3, 2025

🔗 References