CVE-2022-50506

published 2025-10-04

CVE-2022-50506: In the Linux kernel, the following vulnerability has been resolved: drbd: only clone bio if we have a backing device Commit c347a787e34cb (drbd: set ->bi_bdev…

Priority P4 20 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

drbd: only clone bio if we have a backing device

Commit c347a787e34cb (drbd: set ->bi_bdev in drbd_req_new) moved a
bio_set_dev call (which has since been removed) to "earlier", from
drbd_request_prepare to drbd_req_new.

The problem is that this accesses device->ldev->backing_bdev, which is
not NULL-checked at this point. When we don't have an ldev (i.e. when
the DRBD device is diskless), this leads to a null pointer deref.

So, only allocate the private_bio if we actually have a disk. This is
also a small optimization, since we don't clone the bio to only to
immediately free it again in the diskless case.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.0.6-1 (bookworm)	linux 6.0.6-1 (bookworm)
linux	linux	—	—
linux	linux	>= c347a787e34cba0e5a80a04082dacaf259105605 < 05580a3bbf3cec677cb00a85dfeb21d6a9b48eaf	05580a3bbf3cec677cb00a85dfeb21d6a9b48eaf
linux	linux	>= c347a787e34cba0e5a80a04082dacaf259105605 < 6d42ddf7f27b6723549ee6d4c8b1b418b59bf6b5	6d42ddf7f27b6723549ee6d4c8b1b418b59bf6b5
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 6.0.6-1	6.0.6-1
linux	linux_kernel	>= 0 < 6.0.6-1	6.0.6-1
linux	linux_kernel	>= 0 < 6.0.6-1	6.0.6-1
linux	linux_kernel	>= 5.18 < 6.0.6	6.0.6

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-476