CVE-2024-57929 – A use-after-free vulnerability in the Linux ker... (How to Fix)

Q: What is the severity of CVE-2024-57929?

CVE-2024-57929 has a CVSS score of 7.1 (HIGH). A use-after-free vulnerability in the Linux kernel's device-mapper array cursor implementation allows double-freeing of memory blocks when reading corrupted array blocks. This affects Linux systems using device-mapper cache targets. The vulnerability can cause kernel panics and system crashes.

📋 TL;DR

A use-after-free vulnerability in the Linux kernel's device-mapper array cursor implementation allows double-freeing of memory blocks when reading corrupted array blocks. This affects Linux systems using device-mapper cache targets. The vulnerability can cause kernel panics and system crashes.

💻 Affected Systems

Products:

Linux kernel

Versions: Linux kernel versions before the fix commits (specific versions vary by distribution)

Operating Systems: Linux distributions using vulnerable kernel versions

Default Config Vulnerable: ✅ No

Notes: Only vulnerable when using device-mapper cache targets. Not all Linux systems use this feature by default.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to system crash and denial of service, potentially causing data corruption in active storage operations.

🟠

Likely Case

System crash when accessing corrupted device-mapper cache metadata, resulting in temporary denial of service until system reboot.

🟢

If Mitigated

No impact if device-mapper cache is not used or if array blocks are not corrupted.

🌐 Internet-Facing: LOW - This is a local kernel vulnerability requiring access to storage devices, not directly exploitable over network.

🏢 Internal Only: MEDIUM - Can be triggered by privileged users or processes with access to storage devices, potentially causing system instability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires ability to corrupt device-mapper array blocks and trigger cache operations. Requires local access or ability to manipulate storage devices.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Linux kernel with commits 017c4470bff53585370028fec9341247bad358ff or later

Vendor Advisory: https://git.kernel.org/stable/c/017c4470bff53585370028fec9341247bad358ff

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution vendor. 2. Reboot system to load new kernel. 3. Verify kernel version after reboot.

🔧 Temporary Workarounds

Disable device-mapper cache

all

Avoid using device-mapper cache targets which trigger the vulnerable code path

dmsetup remove cache
dmsetup remove cmeta
dmsetup remove cdata
dmsetup remove corig

🧯 If You Can't Patch

Avoid using device-mapper cache functionality
Implement strict access controls to prevent unauthorized storage device manipulation

🔍 How to Verify

Check if Vulnerable:

Check kernel version and if device-mapper cache is in use: 'uname -r' and 'dmsetup status | grep cache'

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version is patched and test with dm-unit array_cursor/damaged test if available

📡 Detection & Monitoring

Log Indicators:

Kernel BUG at drivers/md/dm-bufio.c
device-mapper: array: array_block_check failed
device-mapper: block manager: array validator check failed

Network Indicators:

None - local vulnerability only

SIEM Query:

source="kernel" AND ("dm-bufio.c" OR "array_block_check failed" OR "array validator check failed")

📊 Metadata

CVE ID: CVE-2024-57929

CVSS v3 Score: 7.1 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE: CWE-672

EPSS Score: 0.06% exploit probability (17.6th percentile)

Published: January 19, 2025

Last Updated: November 3, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-57929, you might also want to check these: