Heimdall Security Logo

CVE-2024-50280

Vulnérabilité élevée dans Linux (Linux)

CVSS 7.8 · Élevée
EPSS 0.3%
Linux•Linux•Versions : 6.12, <8cc12dab635333c4ea28e72d7b947be7d0543c2c, <=6.1.*, <5.15.181, <=6.11.*, 034cbc8d3b47a56acd89453c29632a9c117de09d, <135496c208ba26fd68cdef10b64ed7a91ac9a7ff, <6.1.117, d2a0b298ebf83ab6236f66788a3541e91ce75a70, 0, 2f097dfac7579fd84ff98eb1d3acd41d53a485f3, 5.10.237, <4.10, 4.14.303, 6a3e412c2ab131c54945327a7676b006f000a209, <5a754d3c771280f2d06bf8ab716d6a0d36ca256e, 993406104d2b28fe470126a062ad37a1e21e792e, 4.19.270, <4.20, <=5.10.*, 5.15.87, <=6.6.*, 4d20032dd90664de09f2902a7ea49ae2f7771746, 6.11.8, 6.6.61, 5.4.229, <40fac0271c7aedf60d81ed8214e80851e5b26312, <d154b333a5667b6c1b213a11a41ad7aaccd10c3d, <5.5, 6.1.117, <aee3ecda73ce13af7c3e556383342b57e6bd0718, <6.2, 2b17026685a270b2beaf1cdd9857fcedd3505c7e, 4.9.337, 6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa, 6.1.4, 5.10.163, <=*, 6ac4f36910764cb510bafc4c3768544f86ca48ca, <=5.15.*, 5.15.181, 6.0.18, <5.10.237, <4.15, <6.1, 6.2

Description

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayed_work on cache_ctr error An unexpected WARN_ON from flush_work() may occur when cache creation fails, caused by destroying the uninitialized delayed_work waker in the error path of cache_create(). For example, the warning appears on the superblock checksum error. Reproduce steps: dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 65536 linear /dev/sdc 8192" dmsetup create corig --table "0 524288 linear /dev/sdc 262144" dd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table "0 524288 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0" Kernel logs: (snip) WARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890 Fix by pulling out the cancel_delayed_work_sync() from the constructor's error path. This patch doesn't affect the use-after-free fix for concurrent dm_resume and dm_destroy (commit 6a459d8edbdb ("dm cache: Fix UAF in destroy()")) as cache_dtr is not changed.

Gravité et risque d'exploitation

CVE-2024-50280 obtient un score CVSS de 7.8/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.25 %, ce qui la place devant 15.5 % des CVE référencées.

Que faire ?

  • Vérifiez si Linux (versions 6.12, <8cc12dab635333c4ea28e72d7b947be7d0543c2c, <=6.1.*, <5.15.181, <=6.11.*, 034cbc8d3b47a56acd89453c29632a9c117de09d, <135496c208ba26fd68cdef10b64ed7a91ac9a7ff, <6.1.117, d2a0b298ebf83ab6236f66788a3541e91ce75a70, 0, 2f097dfac7579fd84ff98eb1d3acd41d53a485f3, 5.10.237, <4.10, 4.14.303, 6a3e412c2ab131c54945327a7676b006f000a209, <5a754d3c771280f2d06bf8ab716d6a0d36ca256e, 993406104d2b28fe470126a062ad37a1e21e792e, 4.19.270, <4.20, <=5.10.*, 5.15.87, <=6.6.*, 4d20032dd90664de09f2902a7ea49ae2f7771746, 6.11.8, 6.6.61, 5.4.229, <40fac0271c7aedf60d81ed8214e80851e5b26312, <d154b333a5667b6c1b213a11a41ad7aaccd10c3d, <5.5, 6.1.117, <aee3ecda73ce13af7c3e556383342b57e6bd0718, <6.2, 2b17026685a270b2beaf1cdd9857fcedd3505c7e, 4.9.337, 6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa, 6.1.4, 5.10.163, <=*, 6ac4f36910764cb510bafc4c3768544f86ca48ca, <=5.15.*, 5.15.181, 6.0.18, <5.10.237, <4.15, <6.1, 6.2) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE