Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2024-50278: Linux kernel cache may crash if fast device expands
CVE-2024-50278 · published 1 year ago
Summary
The cache component of the Linux kernel can write outside its memory limits when the fast storage device is enlarged before the cache is resumed for the first time. This can cause crashes or instability on Linux kernel builds such as the mainline kernel and Canonical's cloud and FIPS variants. Apply the latest kernel updates that include the fix, or avoid changing the fast device size until after the cache has been fully resumed.
What to do
- Update canonical linux-aws-fips to version 5.15.0-1078.85+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1080.89+fips1.
- Update canonical linux-fips to version 5.15.0-133.144+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1077.86+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1071.73.
- Update canonical linux-realtime to version 5.15.0-1078.86.
- Update canonical linux-realtime-6.8 to version 6.8.1-1020.21~22.04.1.
- Update canonical linux-aws-5.4 to version 5.4.0-1142.152~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1145.152~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1143.152~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-208.228~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1086.91~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1138.147~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1129.142~18.04.1.
- Update canonical linux to version 5.4.0-208.228.
- Update canonical linux-aws to version 5.4.0-1140.150.
- Update canonical linux-aws-5.15 to version 5.15.0-1080.87~20.04.1.
- Update canonical linux-azure to version 5.4.0-1145.152.
- Update canonical linux-azure-5.15 to version 5.15.0-1081.90~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1099.106.
- Update canonical linux-gcp to version 5.4.0-1143.152.
- Update canonical linux-gcp-5.15 to version 5.15.0-1077.86~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-134.145~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1086.91.
- Update canonical linux-ibm-5.15 to version 5.15.0-1074.77~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1073.79~20.04.2.
- Update canonical linux-iot to version 5.4.0-1048.51.
- Update canonical linux-kvm to version 5.4.0-1127.136.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-133.143~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1138.147.
- Update canonical linux-oracle-5.15 to version 5.15.0-1075.81~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1129.142.
- Update canonical linux-riscv-5.15 to version 5.15.0-1073.77~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1058.62.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1039.39~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1140.151+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1145.152+fips1.
- Update canonical linux-fips to version 5.4.0-1116.126.
- Update canonical linux-gcp-fips to version 5.4.0-1143.152+fips1.
- Update canonical linux to version 5.15.0-133.144.
- Update canonical linux-aws to version 5.15.0-1078.85.
- Update canonical linux-aws-6.8 to version 6.8.0-1027.29~22.04.1.
- Update canonical linux-azure to version 5.15.0-1081.90.
- Update canonical linux-azure-6.8 to version 6.8.0-1027.32~22.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1081.90.1.
- Update canonical linux-gcp to version 5.15.0-1077.86.
- Update canonical linux-gcp-6.8 to version 6.8.0-1028.30~22.04.1.
- Update canonical linux-gke to version 5.15.0-1075.81.
- Update canonical linux-gkeop to version 5.15.0-1060.68.
- Update canonical linux-hwe-6.8 to version 6.8.0-58.60~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1070.73.
- Update canonical linux-ibm-6.8 to version 6.8.0-1024.24~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1073.79.
- Update canonical linux-kvm to version 5.15.0-1076.81.
- Update canonical linux-lowlatency to version 5.15.0-133.143.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-58.60.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1072.73.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1026.29~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1033.33.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1021.21.
- Update canonical linux-oracle to version 5.15.0-1075.81.
- Update canonical linux-oracle-6.8 to version 6.8.0-1024.25~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1072.75.
- Update canonical linux-riscv-6.8 to version 6.8.0-58.60.1~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1044.48.
- Update canonical linux-bluefield to version 5.15.0-1060.62.
- Update canonical linux to version 6.8.0-58.60.
- Update canonical linux-aws to version 6.8.0-1027.29.
- Update canonical linux-azure to version 6.8.0-1027.32.
- Update canonical linux-azure-6.11 to version 6.11.0-1012.12~24.04.1.
- Update canonical linux-azure-nvidia to version 6.8.0-1014.15.
- Update canonical linux-gcp to version 6.8.0-1028.30.
- Update canonical linux-gcp-6.11 to version 6.11.0-1011.11~24.04.1.
- Update canonical linux-gke to version 6.8.0-1023.27.
- Update canonical linux-gkeop to version 6.8.0-1010.12.
- Update canonical linux-ibm to version 6.8.0-1024.24.
- Update canonical linux-lowlatency to version 6.8.0-58.60.1.
- Update canonical linux-nvidia to version 6.8.0-1026.29.
- Update canonical linux-nvidia-6.11 to version 6.11.0-1007.7.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1026.29.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1008.8.
- Update canonical linux-oem-6.11 to version 6.11.0-1015.15.
- Update canonical linux-oem-6.8 to version 6.8.0-1026.26.
- Update canonical linux-oracle to version 6.8.0-1024.25.
- Update canonical linux-raspi to version 6.8.0-1028.32.
- Update canonical linux-riscv to version 6.8.0-58.60.1.
- Update canonical linux-xilinx to version 6.8.0-1017.18.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2023.24.
- Update canonical linux-realtime to version 6.8.1-1020.21.
- Update debian linux to version 6.1.119-1.
- Update debian linux to version 6.11.9-1.
- Update linux kernel to version 6.11.8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 3.13, < 4.19.324 >= 4.20, < 5.4.286 >= 5.5, < 5.10.230 >= 5.11, < 5.15.172 >= 5.16, < 6.1.117 >= 6.2, < 6.6.61 >= 6.7, < 6.11.8 6.12 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1078.85+fips1 Fix: upgrade to 5.15.0-1078.85+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1080.89+fips1 Fix: upgrade to 5.15.0-1080.89+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-133.144+fips1 Fix: upgrade to 5.15.0-133.144+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1077.86+fips1 Fix: upgrade to 5.15.0-1077.86+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1071.73 Fix: upgrade to 5.15.0-1071.73
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1078.86 Fix: upgrade to 5.15.0-1078.86
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1020.21~22.04.1 Fix: upgrade to 6.8.1-1020.21~22.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1142.152~18.04.1 Fix: upgrade to 5.4.0-1142.152~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1145.152~18.04.1 Fix: upgrade to 5.4.0-1145.152~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1143.152~18.04.1 Fix: upgrade to 5.4.0-1143.152~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-208.228~18.04.1 Fix: upgrade to 5.4.0-208.228~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1086.91~18.04.1 Fix: upgrade to 5.4.0-1086.91~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
Showing 50 of 210. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1138.147~18.04.1 Fix: upgrade to 5.4.0-1138.147~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1129.142~18.04.1 Fix: upgrade to 5.4.0-1129.142~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-208.228 Fix: upgrade to 5.4.0-208.228
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1140.150 Fix: upgrade to 5.4.0-1140.150
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1080.87~20.04.1 Fix: upgrade to 5.15.0-1080.87~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1145.152 Fix: upgrade to 5.4.0-1145.152
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1081.90~20.04.1 Fix: upgrade to 5.15.0-1081.90~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1099.106 Fix: upgrade to 5.4.0-1099.106
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1143.152 Fix: upgrade to 5.4.0-1143.152
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1077.86~20.04.1 Fix: upgrade to 5.15.0-1077.86~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-134.145~20.04.1 Fix: upgrade to 5.15.0-134.145~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1086.91 Fix: upgrade to 5.4.0-1086.91
|
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1074.77~20.04.1 Fix: upgrade to 5.15.0-1074.77~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1073.79~20.04.2 Fix: upgrade to 5.15.0-1073.79~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1048.51 Fix: upgrade to 5.4.0-1048.51
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1127.136 Fix: upgrade to 5.4.0-1127.136
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-133.143~20.04.1 Fix: upgrade to 5.15.0-133.143~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1138.147 Fix: upgrade to 5.4.0-1138.147
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1075.81~20.04.1 Fix: upgrade to 5.15.0-1075.81~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1129.142 Fix: upgrade to 5.4.0-1129.142
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1073.77~20.04.1 Fix: upgrade to 5.15.0-1073.77~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1058.62 Fix: upgrade to 5.4.0-1058.62
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1039.39~20.04.1 Fix: upgrade to 5.15.0-1039.39~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1140.151+fips1 Fix: upgrade to 5.4.0-1140.151+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1145.152+fips1 Fix: upgrade to 5.4.0-1145.152+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1116.126 Fix: upgrade to 5.4.0-1116.126
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1143.152+fips1 Fix: upgrade to 5.4.0-1143.152+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-133.144 Fix: upgrade to 5.15.0-133.144
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1078.85 Fix: upgrade to 5.15.0-1078.85
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1027.29~22.04.1 Fix: upgrade to 6.8.0-1027.29~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1081.90 Fix: upgrade to 5.15.0-1081.90
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1027.32~22.04.1 Fix: upgrade to 6.8.0-1027.32~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1081.90.1 Fix: upgrade to 5.15.0-1081.90.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1077.86 Fix: upgrade to 5.15.0-1077.86
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1028.30~22.04.1 Fix: upgrade to 6.8.0-1028.30~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1075.81 Fix: upgrade to 5.15.0-1075.81
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1060.68 Fix: upgrade to 5.15.0-1060.68
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-58.60~22.04.1 Fix: upgrade to 6.8.0-58.60~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1070.73 Fix: upgrade to 5.15.0-1070.73
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1024.24~22.04.1 Fix: upgrade to 6.8.0-1024.24~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1073.79 Fix: upgrade to 5.15.0-1073.79
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1076.81 Fix: upgrade to 5.15.0-1076.81
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-133.143 Fix: upgrade to 5.15.0-133.143
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-58.60.1~22.04.1 Fix: upgrade to 6.8.0-58.60.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1072.73 Fix: upgrade to 5.15.0-1072.73
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1026.29~22.04.1 Fix: upgrade to 6.8.0-1026.29~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1033.33 Fix: upgrade to 5.15.0-1033.33
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1021.21 Fix: upgrade to 5.15.0-1021.21
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1075.81 Fix: upgrade to 5.15.0-1075.81
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1024.25~22.04.1 Fix: upgrade to 6.8.0-1024.25~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1072.75 Fix: upgrade to 5.15.0-1072.75
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-58.60.1~22.04.1 Fix: upgrade to 6.8.0-58.60.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1044.48 Fix: upgrade to 5.15.0-1044.48
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1060.62 Fix: upgrade to 5.15.0-1060.62
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-58.60 Fix: upgrade to 6.8.0-58.60
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1027.29 Fix: upgrade to 6.8.0-1027.29
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1027.32 Fix: upgrade to 6.8.0-1027.32
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 |
< 6.11.0-1012.12~24.04.1 Fix: upgrade to 6.11.0-1012.12~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia |
< 6.8.0-1014.15 Fix: upgrade to 6.8.0-1014.15
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1028.30 Fix: upgrade to 6.8.0-1028.30
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 |
< 6.11.0-1011.11~24.04.1 Fix: upgrade to 6.11.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1023.27 Fix: upgrade to 6.8.0-1023.27
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1010.12 Fix: upgrade to 6.8.0-1010.12
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1024.24 Fix: upgrade to 6.8.0-1024.24
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-58.60.1 Fix: upgrade to 6.8.0-58.60.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1026.29 Fix: upgrade to 6.8.0-1026.29
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 |
< 6.11.0-1007.7 Fix: upgrade to 6.11.0-1007.7
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1026.29.1 Fix: upgrade to 6.8.0-1026.29.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1008.8 Fix: upgrade to 6.8.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 |
< 6.11.0-1015.15 Fix: upgrade to 6.11.0-1015.15
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1026.26 Fix: upgrade to 6.8.0-1026.26
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1024.25 Fix: upgrade to 6.8.0-1024.25
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1028.32 Fix: upgrade to 6.8.0-1028.32
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv |
< 6.8.0-58.60.1 Fix: upgrade to 6.8.0-58.60.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1017.18 Fix: upgrade to 6.8.0-1017.18
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2023.24 Fix: upgrade to 6.8.0-2023.24
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1020.21 Fix: upgrade to 6.8.1-1020.21
|
| Ubuntu:26.04 | canonical | linux-nvidia | All versions |
| Debian:12 | debian | linux |
< 6.1.119-1 Fix: upgrade to 6.1.119-1
|
| Debian:13 | debian | linux |
< 6.11.9-1 Fix: upgrade to 6.11.9-1
|
| Linux | linux | kernel |
>= 6.7.0, < 6.11.8 Fix: upgrade to 6.11.8
|
Original advisory text
dm cache: fix potential out-of-bounds access on the first resume
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume Out-of-bounds access occurs if the fast device is expanded unexpectedly before the first-time resume of the cache table. This happens because expanding the fast device requires reloading the cache table for cache_create to allocate new in-core data structures that fit the new size, and the check in cache_preresume is not performed during the first resume, leading to the issue. Reproduce steps: 1. prepare component devices: dmsetup create cmeta --table "0 8192 linear /dev/sdc 0" dmsetup create cdata --table "0 65536 linear /dev/sdc 8192" dmsetup create corig --table "0 524288 linear /dev/sdc 262144" dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct 2. load a cache table of 512 cache blocks, and deliberately expand the fast device before resuming the cache, making the in-core data structures inadequate. dmsetup create cache --notable dmsetup reload cache --table "0 524288 cache /dev/mapper/cmeta \ /dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0" dmsetup reload cdata --table "0 131072 linear /dev/sdc 8192" dmsetup resume cdata dmsetup resume cache 3. suspend the cache to write out the in-core dirty bitset and hint array, leading to out-of-bounds access to the dirty bitset at offset 0x40: dmsetup suspend cache KASAN reports: BUG: KASAN: vmalloc-out-of-bounds in is_dirty_callback+0x2b/0x80 Read of size 8 at addr ffffc90000085040 by task dmsetup/90 (...snip...) The buggy address belongs to the virtual mapping at [ffffc90000085000, ffffc90000087000) created by: cache_ctr+0x176a/0x35f0 (...snip...) Memory state around the buggy address: ffffc90000084f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc90000084f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 >ffffc90000085000: 00 00 00 00 00 00 00 00 f8 f8 f8 f8 f8 f8 f8 f8 ^ ffffc90000085080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc90000085100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 Fix by checking the size change on the first resume.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50278... Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://nvd.nist.gov/vuln/detail/CVE-2024-50278 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2024-50278 Vendor Advisory
- https://ubuntu.com/security/CVE-2024-50278 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-50278 Third Party Advisory
- https://git.kernel.org/stable/c/fdef3b94dfebd57e3077a578b6e309a2bb6fa688 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html URL
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html URL
- https://ubuntu.com/security/notices/USN-7390-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7293-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7308-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7294-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7294-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7310-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7294-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7331-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7388-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7389-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7393-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7401-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7413-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7449-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7450-1 Vendor Advisory
- https://git.kernel.org/linus/c0ade5d98979585d4f5a93e4514c2e9a65afa08d Third Party Advisory
- https://git.kernel.org/stable/c/e492f71854ce03474d49e87fd98b8df1f7cd1d2d Third Party Advisory
- https://git.kernel.org/stable/c/2222b0929d00e2d13732b799b63be391b5de4492 Third Party Advisory
- https://git.kernel.org/stable/c/483b7261b35a9d369082ab298a6670912243f0be Third Party Advisory
- https://git.kernel.org/stable/c/c52ec00cb2f9bebfada22edcc0db385b910a1cdb Third Party Advisory
- https://git.kernel.org/stable/c/036dd6e3d2638103e0092864577ea1d091466b86 Third Party Advisory
- https://git.kernel.org/stable/c/13ed3624c6ef283acefa4cc42cc8ae54fd4391a4 Third Party Advisory
- https://git.kernel.org/stable/c/c0ade5d98979585d4f5a93e4514c2e9a65afa08d Third Party Advisory
- https://ubuntu.com/security/notices/USN-7276-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7277-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7288-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7289-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7291-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7288-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7289-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7294-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7295-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7289-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7305-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7289-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7451-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7452-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7453-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7458-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7449-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7468-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7523-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7524-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7539-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7540-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-125Out-of-bounds Read
Timeline
Published19 Nov 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-50278 · NVD
CVE-2024-50278 · OSV
UBUNTU-CVE-2024-50278 · OSV
DEBIAN-CVE-2024-50278 · OSV
Track software like this
Free during beta