https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:18:15 +0000 https://vulnerability.circl.lu/vuln/cve-2024-50280 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>dm cache: fix flushing uninitialized delayed_work on cache_ctr error</p> <p>An unexpected WARN_ON from flush_work() may occur when cache creation fails, caused by destroying the uninitialized delayed_work waker in the error path of cache_create(). For example, the warning appears on the superblock checksum error.</p> <p>Reproduce steps:</p> <p>dmsetup create cmeta --table &#34;0 8192 linear /dev/sdc 0&#34; dmsetup create cdata --table &#34;0 65536 linear /dev/sdc 8192&#34; dmsetup create corig --table &#34;0 524288 linear /dev/sdc 262144&#34; dd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table &#34;0 524288 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0&#34;</p> <p>Kernel logs:</p> <p>(snip) WARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890</p> <p>Fix by pulling out the cancel_delayed_work_sync() from the constructor&#39;s error path. This patch doesn&#39;t affect the use-after-free fix for concurrent dm_resume and dm_destroy (commit 6a459d8edbdb (&#34;dm cache: Fix UAF in destroy()&#34;)) as cache_dtr is not changed.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>dm cache: fix flushing uninitialized delayed_work on cache_ctr error</p> <p>An unexpected WARN_ON from flush_work() may occur when cache creation fails, caused by destroying the uninitialized delayed_work waker in the error path of cache_create(). For example, the warning appears on the superblock checksum error.</p> <p>Reproduce steps:</p> <p>dmsetup create cmeta --table &#34;0 8192 linear /dev/sdc 0&#34; dmsetup create cdata --table &#34;0 65536 linear /dev/sdc 8192&#34; dmsetup create corig --table &#34;0 524288 linear /dev/sdc 262144&#34; dd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct dmsetup create cache --table &#34;0 524288 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0&#34;</p> <p>Kernel logs:</p> <p>(snip) WARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890</p> <p>Fix by pulling out the cancel_delayed_work_sync() from the constructor&#39;s error path. This patch doesn&#39;t affect the use-after-free fix for concurrent dm_resume and dm_destroy (commit 6a459d8edbdb (&#34;dm cache: Fix UAF in destroy()&#34;)) as cache_dtr is not changed.</p> https://vulnerability.circl.lu/vuln/cve-2024-50280