CVE-2022-50022

Description

In the Linux kernel, the following vulnerability has been resolved: drivers:md:fix a potential use-after-free bug In line 2884, "raid5_release_stripe(sh);" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines 2886 "if (sh->batch_head && sh != sh->batch_head)". This may result in an use-after-free bug. It can be fixed by moving "raid5_release_stripe(sh);" to the bottom of the function.

Reserved 2025-06-18 | Published 2025-06-18 | Updated 2025-07-15 | Assigner Linux

Product status

Default status
unaffected

59fc630b8b5f9f21c8ce3ba153341c107dce1b0c before 7470a4314b239e9a9580f248fdf4c9a92805490e
affected

59fc630b8b5f9f21c8ce3ba153341c107dce1b0c before 09cf99bace7789d91caa8d10fbcfc8b2fb35857f
affected

59fc630b8b5f9f21c8ce3ba153341c107dce1b0c before e5b3dd2d92c4511e81f6e4ec9c5bb7ad25e03d13
affected

59fc630b8b5f9f21c8ce3ba153341c107dce1b0c before f5d46f1b47f65da1faf468277b261eb78c8e25b5
affected

59fc630b8b5f9f21c8ce3ba153341c107dce1b0c before 5d8325fd15892c8ab1146edc1d7ed8463de39636
affected

59fc630b8b5f9f21c8ce3ba153341c107dce1b0c before d9b94c3ace549433de8a93eeb27b0391fc8ac406
affected

59fc630b8b5f9f21c8ce3ba153341c107dce1b0c before eb3a4f73f43f839df981dda5859e8e075067a360
affected

59fc630b8b5f9f21c8ce3ba153341c107dce1b0c before 104212471b1c1817b311771d817fb692af983173
affected

Default status
affected

4.1
affected

Any version before 4.1
unaffected

4.9.326
unaffected

4.14.291
unaffected

4.19.256
unaffected

5.4.211
unaffected

5.10.138
unaffected

5.15.63
unaffected

5.19.4
unaffected

6.0
unaffected

References

git.kernel.org/...c/7470a4314b239e9a9580f248fdf4c9a92805490e

git.kernel.org/...c/09cf99bace7789d91caa8d10fbcfc8b2fb35857f

git.kernel.org/...c/e5b3dd2d92c4511e81f6e4ec9c5bb7ad25e03d13

git.kernel.org/...c/f5d46f1b47f65da1faf468277b261eb78c8e25b5

git.kernel.org/...c/5d8325fd15892c8ab1146edc1d7ed8463de39636

git.kernel.org/...c/d9b94c3ace549433de8a93eeb27b0391fc8ac406

git.kernel.org/...c/eb3a4f73f43f839df981dda5859e8e075067a360

git.kernel.org/...c/104212471b1c1817b311771d817fb692af983173

cve.org (CVE-2022-50022)

nvd.nist.gov (CVE-2022-50022)

Download JSON