CVE-2022-50350 — Race Condition in Linux

CWE-362 — Race ConditionCWE-476 — NULL Pointer Dereference6 documents6 sources
Severity
4.7MEDIUMNVD
EPSS
0.0%
top 98.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
LinuxLinux KernelDebian Linux+3 more
Timeline
PublishedSep 16

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix a race condition between login_work and the login thread In case a malicious initiator sends some random data immediately after a login PDU; the iscsi_target_sk_data_ready() callback will schedule the login_work and, at the same time, the negotiation may end without clearing the LOGIN_FLAGS_INITIAL_PDU flag (because no additional PDU exchanges are required to complete the login). The login has been co…

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6

Affected Packages7 packages

▶NVDlinux/linux_kernel3.12 — 6.0.16+1
▶Debianlinux/linux_kernel< 6.1.4-1+2

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-vh3w-x8qx-rvfm: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix a race condition between login_work and the login thread↗2025-09-16
▶
OSV
CVE-2022-50350: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix a race condition between login_work and the login thread↗2025-09-16
▶

📋Vendor Advisories

3
Red Hat
kernel: scsi: target: iscsi: Fix a race condition between login_work and the login thread↗2025-09-16
▶
Microsoft
scsi: target: iscsi: Fix a race condition between login_work and the login thread↗2025-09-09
▶
Debian
CVE-2022-50350: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: targe...↗2022
▶
CVE-2022-50350 — Race Condition in Linux | cvebase