CVE-2022-50300 — Use After Free in Linux

CWE-416 — Use After FreeCWE-911 — Improper Update of Reference Count5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 95.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedSep 15

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in read_one_chunk Store the error code before freeing the extent_map. Though it's reference counted structure, in that function it's the first and last allocation so this would lead to a potential use-after-free. The error can happen eg. when chunk is stored on a missing device and the degraded mount option is missing. Bugzilla: https://bugzilla.kernel.org/sho…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶NVDlinux/linux_kernel4.15 — 5.15.87+2
▶Debianlinux/linux_kernel< 6.1.4-1+2
▶CVEListV5linux/linuxadfb69af7d8cb6a3958f75aad1ef4bc96891d116 — b8e7ed42bc3ca0d0e4191ee394d34962d3624c22+4
▶debiandebian/linux< linux 6.1.4-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2022-50300: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in read_one_chun↗2025-09-15
▶
GHSA
GHSA-w775-9978-cp8r: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in read_one_chu↗2025-09-15
▶

📋Vendor Advisories

2
Red Hat
kernel: Linux kernel: Denial of Service in btrfs due to use-after-free vulnerability↗2025-09-15
▶
Debian
CVE-2022-50300: linux - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ...↗2022
▶
CVE-2022-50300 — Use After Free in Linux | cvebase