CVE-2022-50715 — Premature Release of Resource During Expected Lifetime in Linux
Severity
4.4MEDIUM
No vectorEPSS
0.0%
top 84.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
md/raid1: stop mdx_raid1 thread when raid1 array run failed
fail run raid1 array when we assemble array with the inactive disk only,
but the mdx_raid1 thread were not stop, Even if the associated resources
have been released. it will caused a NULL dereference when we do poweroff.
This causes the following Oops:
[ 287.587787] BUG: kernel NULL pointer dereference, address: 0000000000000070
[ 287.594762] #PF: supervisor read acc…
Affected Packages4 packages
▶CVEListV5linux/linux5bad5054ecd83c866502f0370edfc9aa55dc9aa7 — d684ceb77311410aeaf5189d321f9f564838c49a+12
🔴Vulnerability Details
3GHSA▶
GHSA-rrpf-vhv2-qw86: In the Linux kernel, the following vulnerability has been resolved:
md/raid1: stop mdx_raid1 thread when raid1 array run failed
fail run raid1 array↗2025-12-24
OSV▶
CVE-2022-50715: In the Linux kernel, the following vulnerability has been resolved: md/raid1: stop mdx_raid1 thread when raid1 array run failed fail run raid1 array w↗2025-12-24