In the Linux kernel, the following vulnerability has been resolved: drivers:md:fix a potential use-after-free bug In line 2884, "raid5_release_stripe(sh);" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines 2886 "if (sh->batch_head && sh != sh->batch_head)". This may result in an use-after-free bug. It can be fixed by moving "raid5_release_stripe(sh);" to the bottom of the function.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/09cf99bace7789d91caa8d10fbcfc8b2fb35857f cve-icon cve-icon
https://git.kernel.org/stable/c/104212471b1c1817b311771d817fb692af983173 cve-icon cve-icon
https://git.kernel.org/stable/c/5d8325fd15892c8ab1146edc1d7ed8463de39636 cve-icon cve-icon
https://git.kernel.org/stable/c/7470a4314b239e9a9580f248fdf4c9a92805490e cve-icon cve-icon
https://git.kernel.org/stable/c/d9b94c3ace549433de8a93eeb27b0391fc8ac406 cve-icon cve-icon
https://git.kernel.org/stable/c/e5b3dd2d92c4511e81f6e4ec9c5bb7ad25e03d13 cve-icon cve-icon
https://git.kernel.org/stable/c/eb3a4f73f43f839df981dda5859e8e075067a360 cve-icon cve-icon
https://git.kernel.org/stable/c/f5d46f1b47f65da1faf468277b261eb78c8e25b5 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025061835-CVE-2022-50022-98b6@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50022 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50022 cve-icon
History

Thu, 19 Jun 2025 15:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Wed, 18 Jun 2025 11:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drivers:md:fix a potential use-after-free bug In line 2884, "raid5_release_stripe(sh);" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines 2886 "if (sh->batch_head && sh != sh->batch_head)". This may result in an use-after-free bug. It can be fixed by moving "raid5_release_stripe(sh);" to the bottom of the function.
Title drivers:md:fix a potential use-after-free bug
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-06-18T11:01:25.965Z

Updated: 2025-07-15T15:43:42.948Z

Reserved: 2025-06-18T10:57:27.394Z

Link: CVE-2022-50022

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-06-18T11:15:30.390

Modified: 2025-06-18T13:46:52.973

Link: CVE-2022-50022

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-06-18T00:00:00Z

Links: CVE-2022-50022 - Bugzilla