CVE-2022-50697 — Signal Handler Race Condition in Linux
Severity
4.7MEDIUM
No vectorEPSS
0.0%
top 84.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
mrp: introduce active flags to prevent UAF when applicant uninit
The caller of del_timer_sync must prevent restarting of the timer, If
we have no this synchronization, there is a small probability that the
cancellation will not be successful.
And syzbot report the fellowing crash:
BUG: KASAN: use-after-free in hlist_add_head include/linux/list.h:929 [inline]
BUG: KASAN: use-after-free in enqueue_timer+0x18/0xa4 kernel/time/ti…
Affected Packages4 packages
▶CVEListV5linux/linuxfebf018d22347b5df94066bca05d0c11a84e839d — 98f53e591940e4c3818be358c5dc684d5b30cb56+9
🔴Vulnerability Details
3OSV▶
CVE-2022-50697: In the Linux kernel, the following vulnerability has been resolved: mrp: introduce active flags to prevent UAF when applicant uninit The caller of del↗2025-12-24
GHSA▶
GHSA-9xfq-qg8q-q648: In the Linux kernel, the following vulnerability has been resolved:
mrp: introduce active flags to prevent UAF when applicant uninit
The caller of d↗2025-12-24