CVE-2022-50552 — Use After Free in Linux
Severity
7.8HIGHNVD
EPSS
0.0%
top 98.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 7
Latest updateApr 20
Description
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: use quiesced elevator switch when reinitializing queues
The hctx's run_work may be racing with the elevator switch when
reinitializing hardware queues. The queue is merely frozen in this
context, but that only prevents requests from allocating and doesn't
stop the hctx work from running. The work may get an elevator pointer
that's being torn down, and can result in use-after-free errors and
kernel panics (example below…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages4 packages
▶CVEListV5linux/linuxd48ece209f82c9ce07be942441b53d3fa3664936 — 63a681bcc32a43528ce0f690569f7f48e59c3963+3
Patches
🔴Vulnerability Details
3VulDB▶
Linux Kernel up to 5.19.16/6.0.2 run_work null pointer dereference (EUVD-2025-32006 / Nessus ID 284771)↗2026-04-20
GHSA▶
GHSA-8p56-6q52-jgv2: In the Linux kernel, the following vulnerability has been resolved:
blk-mq: use quiesced elevator switch when reinitializing queues
The hctx's run_w↗2025-10-07
OSV▶
CVE-2022-50552: In the Linux kernel, the following vulnerability has been resolved: blk-mq: use quiesced elevator switch when reinitializing queues The hctx's run_wor↗2025-10-07