Threats tagged 'ghsa-6fxv-v3gm-9m2r'

CVE-2024-50278 is a high-severity vulnerability in the Linux kernel's device mapper cache subsystem. It involves a potential out-of-bounds memory access triggered during the first resume operation if the fast device backing the cache is unexpectedly expanded. This occurs because the cache table reload and associated data structure resizing are not properly checked during the initial resume, leading to memory corruption. The issue was identified through kernel address sanitizer (KASAN) reports. The vulnerability can cause a crash or denial of service but does not impact confidentiality or integrity. A fix involves adding a size change check on the first resume to prevent out-of-bounds access.