CVE-2024-50279

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to an out-of-bounds access to the dirty bitset when resizing in the dm-cache. This occurs because an index bug in bitset iteration causes the out-of-bounds access when shrinking the fast device. The problem can be reproduced by creating a cache device and then shrinking the fast device to a smaller size, triggering the out-of-bounds access. Technical details include the cache preresume function and the cache ctr function, which are involved in the bug. The dmsetup command is used to create and manage the cache device.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.