CVE-2022-50314
published 2025-09-15CVE-2022-50314: In the Linux kernel, the following vulnerability has been resolved: nbd: Fix hung when signal interrupts nbd_start_device_ioctl() syzbot reported hung task…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
syzbot reported hung task [1]. The following program is a simplified
version of the reproducer:
int main(void)
{
int sv[2], fd;
if (socketpair(AF_UNIX, SOCK_STREAM, 0, sv) recv_threads) == 0, the task can hung because it
waits the completion of the inflight IOs.
This patch fixes the issue by clearing queue, not just shutdown, when
signal interrupt nbd_start_device_ioctl().
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 5ea8d10802ec4c153a6e21eebaf412e2abd29736 < 3ba3846cb3e2fb3c6fbf79e998472821b298419e | 3ba3846cb3e2fb3c6fbf79e998472821b298419e |
| linux | linux | >= 5ea8d10802ec4c153a6e21eebaf412e2abd29736 < c7b4641bd2395c2f3cd3b0a0cbf292ed9d489398 | c7b4641bd2395c2f3cd3b0a0cbf292ed9d489398 |
| linux | linux | >= 5ea8d10802ec4c153a6e21eebaf412e2abd29736 < 3575949513ea3b387b30dac1e69468a923c86caf | 3575949513ea3b387b30dac1e69468a923c86caf |
| linux | linux | >= 5ea8d10802ec4c153a6e21eebaf412e2abd29736 < b2700f98b3f4dd19fb4315b70581e5caff89eb49 | b2700f98b3f4dd19fb4315b70581e5caff89eb49 |
| linux | linux | >= 5ea8d10802ec4c153a6e21eebaf412e2abd29736 < c0d73be0af8c1310713bc39a8d7a22e35084e14f | c0d73be0af8c1310713bc39a8d7a22e35084e14f |
| linux | linux | >= 5ea8d10802ec4c153a6e21eebaf412e2abd29736 < 62006a72b05e0d38727eef5188700f2488be5e89 | 62006a72b05e0d38727eef5188700f2488be5e89 |
| linux | linux | >= 5ea8d10802ec4c153a6e21eebaf412e2abd29736 < 35fb7d4a53d9e36d1b91161ea9870d9c6d57dccf | 35fb7d4a53d9e36d1b91161ea9870d9c6d57dccf |
| linux | linux | >= 5ea8d10802ec4c153a6e21eebaf412e2abd29736 < 1de7c3cf48fc41cd95adb12bd1ea9033a917798a | 1de7c3cf48fc41cd95adb12bd1ea9033a917798a |
| linux | linux_kernel | < 4.14.296 | 4.14.296 |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 4.15 < 4.19.262 | 4.19.262 |
| linux | linux_kernel | >= 4.20 < 5.4.220 | 5.4.220 |
| linux | linux_kernel | >= 5.11 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.5 < 5.10.150 | 5.10.150 |
| linux | linux_kernel | >= 6.0 < 6.0.3 | 6.0.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
vendor_redhat·2025-09-15·CVSS 5.5
CVE-2022-50314 [MEDIUM] CWE-667 kernel: nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
kernel: nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
In the Linux kernel, the following vulnerability has been resolved:
nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
syzbot reported hung task [1]. The following program is a simplified
version of the reproducer:
int main(void)
{
int sv[2], fd;
if (socketpair(AF_UNIX, SOCK_STREAM, 0, sv) recv_threads) == 0, the task can hung because it
waits the completion of the inflight IOs.
This patch fixes the issue by clearing queue, not just shutdown, when
signal interrupt nbd_start_device_ioctl().
Statement: A race condition in nbd_start_device_ioctl() could lead to a hang if a signal interrupts the wait on recv_threads. The system may end up with stuck I/O and an unresponsive NBD device.
The issue can only be trigg
Debian
CVE-2022-50314: linux - In the Linux kernel, the following vulnerability has been resolved: nbd: Fix hu...
vendor_debian·2022·CVSS 5.5
CVE-2022-50314 [MEDIUM] CVE-2022-50314: linux - In the Linux kernel, the following vulnerability has been resolved: nbd: Fix hu...
In the Linux kernel, the following vulnerability has been resolved: nbd: Fix hung when signal interrupts nbd_start_device_ioctl() syzbot reported hung task [1]. The following program is a simplified version of the reproducer: int main(void) { int sv[2], fd; if (socketpair(AF_UNIX, SOCK_STREAM, 0, sv) recv_threads) == 0, the task can hung because it waits the completion of the inflight IOs. This patch fixes the issue by clearing queue, not just shutdown, when signal interrupt nbd_start_device_ioctl().
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.3-1)
sid: resolved (fixed in 6.0.3-1)
trixie: resolved (fixed in 6.0.3-1)
OSV
CVE-2022-50314: In the Linux kernel, the following vulnerability has been resolved: nbd: Fix hung when signal interrupts nbd_start_device_ioctl() syzbot reported hung
osv·2025-09-15·CVSS 5.5
CVE-2022-50314 [MEDIUM] CVE-2022-50314: In the Linux kernel, the following vulnerability has been resolved: nbd: Fix hung when signal interrupts nbd_start_device_ioctl() syzbot reported hung
In the Linux kernel, the following vulnerability has been resolved: nbd: Fix hung when signal interrupts nbd_start_device_ioctl() syzbot reported hung task [1]. The following program is a simplified version of the reproducer: int main(void) { int sv[2], fd; if (socketpair(AF_UNIX, SOCK_STREAM, 0, sv) recv_threads) == 0, the task can hung because it waits the completion of the inflight IOs. This patch fixes the issue by clearing queue, not just shutdown, when signal interrupt nbd_start_device_ioctl().
GHSA
GHSA-x3q5-jcq9-7rv7: In the Linux kernel, the following vulnerability has been resolved:
nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
syzbot reported hu
ghsa_unreviewed·2025-09-15
CVE-2022-50314 [MEDIUM] GHSA-x3q5-jcq9-7rv7: In the Linux kernel, the following vulnerability has been resolved:
nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
syzbot reported hu
In the Linux kernel, the following vulnerability has been resolved:
nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
syzbot reported hung task [1]. The following program is a simplified
version of the reproducer:
int main(void)
{
int sv[2], fd;
if (socketpair(AF_UNIX, SOCK_STREAM, 0, sv) recv_threads) == 0, the task can hung because it
waits the completion of the inflight IOs.
This patch fixes the issue by clearing queue, not just shutdown, when
signal interrupt nbd_start_device_ioctl().
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/1de7c3cf48fc41cd95adb12bd1ea9033a917798ahttps://git.kernel.org/stable/c/3575949513ea3b387b30dac1e69468a923c86cafhttps://git.kernel.org/stable/c/35fb7d4a53d9e36d1b91161ea9870d9c6d57dccfhttps://git.kernel.org/stable/c/3ba3846cb3e2fb3c6fbf79e998472821b298419ehttps://git.kernel.org/stable/c/62006a72b05e0d38727eef5188700f2488be5e89https://git.kernel.org/stable/c/b2700f98b3f4dd19fb4315b70581e5caff89eb49https://git.kernel.org/stable/c/c0d73be0af8c1310713bc39a8d7a22e35084e14fhttps://git.kernel.org/stable/c/c7b4641bd2395c2f3cd3b0a0cbf292ed9d489398
2025-09-15
Published