CVE-2022-50843
published 2025-12-30CVE-2022-50843: In the Linux kernel, the following vulnerability has been resolved: dm clone: Fix UAF in clone_dtr() Dm_clone also has the same UAF problem when dm_resume()…
PriorityP419low4.7
EPSS
0.21%
11.9th percentile
In the Linux kernel, the following vulnerability has been resolved:
dm clone: Fix UAF in clone_dtr()
Dm_clone also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in clone_dtr().
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7431b7835f554f8608b415a02cf3c3f086309e02 < 520b56cfd9faee7683f081c3a38f11a81b13a68e | 520b56cfd9faee7683f081c3a38f11a81b13a68e |
| linux | linux | >= 7431b7835f554f8608b415a02cf3c3f086309e02 < 342cfd8426dff4228e6c714bcb9fc8295a2748dd | 342cfd8426dff4228e6c714bcb9fc8295a2748dd |
| linux | linux | >= 7431b7835f554f8608b415a02cf3c3f086309e02 < 856edd0e92f3fe89606b704c86a93daedddfe6ec | 856edd0e92f3fe89606b704c86a93daedddfe6ec |
| linux | linux | >= 7431b7835f554f8608b415a02cf3c3f086309e02 < b1ddb666073bb5f36390aaabaa1a4d48d78c52ed | b1ddb666073bb5f36390aaabaa1a4d48d78c52ed |
| linux | linux | >= 7431b7835f554f8608b415a02cf3c3f086309e02 < 9e113cd4f61f3b0000843b2d0a90ce8b40a1fcff | 9e113cd4f61f3b0000843b2d0a90ce8b40a1fcff |
| linux | linux | >= 7431b7835f554f8608b415a02cf3c3f086309e02 < e4b5957c6f749a501c464f92792f1c8e26b61a94 | e4b5957c6f749a501c464f92792f1c8e26b61a94 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 5.11.0 < 5.15.87 | 5.15.87 |
| linux | linux_kernel | >= 5.16.0 < 6.0.18 | 6.0.18 |
| linux | linux_kernel | >= 5.4.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.4 | 6.1.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.1.3 clone_dtr use after free (Nessus ID 280802 / WID-SEC-2025-2941)
vuldb·2026-04-26
CVE-2022-50843 [CRITICAL] Linux Kernel up to 6.1.3 clone_dtr use after free (Nessus ID 280802 / WID-SEC-2025-2941)
A vulnerability classified as critical was found in Linux Kernel up to 5.4.228/5.10.162/5.15.86/6.0.17/6.1.3. The impacted element is the function clone_dtr. Executing a manipulation can lead to use after free.
The identification of this vulnerability is CVE-2022-50843. The attack needs to be done within the local network. There is no exploit available.
Upgrading the affected component is advised.
GHSA
GHSA-f4xq-gq7q-8jfg: In the Linux kernel, the following vulnerability has been resolved:
dm clone: Fix UAF in clone_dtr()
Dm_clone also has the same UAF problem when dm_
ghsa_unreviewed·2025-12-30
CVE-2022-50843 GHSA-f4xq-gq7q-8jfg: In the Linux kernel, the following vulnerability has been resolved:
dm clone: Fix UAF in clone_dtr()
Dm_clone also has the same UAF problem when dm_
In the Linux kernel, the following vulnerability has been resolved:
dm clone: Fix UAF in clone_dtr()
Dm_clone also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in clone_dtr().
OSV
dm clone: Fix UAF in clone_dtr()
osv·2025-12-30
CVE-2022-50843 dm clone: Fix UAF in clone_dtr()
dm clone: Fix UAF in clone_dtr()
In the Linux kernel, the following vulnerability has been resolved:
dm clone: Fix UAF in clone_dtr()
Dm_clone also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in clone_dtr().
OSV
CVE-2022-50843: In the Linux kernel, the following vulnerability has been resolved: dm clone: Fix UAF in clone_dtr() Dm_clone also has the same UAF problem when dm_re
osv·2025-12-30
CVE-2022-50843 CVE-2022-50843: In the Linux kernel, the following vulnerability has been resolved: dm clone: Fix UAF in clone_dtr() Dm_clone also has the same UAF problem when dm_re
In the Linux kernel, the following vulnerability has been resolved: dm clone: Fix UAF in clone_dtr() Dm_clone also has the same UAF problem when dm_resume() and dm_destroy() are concurrent. Therefore, cancelling timer again in clone_dtr().
Red Hat
kernel: dm clone: Fix UAF in clone_dtr()
vendor_redhat·2025-12-30·CVSS 4.7
CVE-2022-50843 [LOW] CWE-364 kernel: dm clone: Fix UAF in clone_dtr()
kernel: dm clone: Fix UAF in clone_dtr()
In the Linux kernel, the following vulnerability has been resolved:
dm clone: Fix UAF in clone_dtr()
Dm_clone also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in clone_dtr().
A use-after-free vulnerability was found in the device-mapper clone target. When dm_resume() and dm_destroy() execute concurrently, a timer may fire after the clone target structure has been freed, leading to use-after-free.
Statement: Exploitation requires precise timing between device-mapper resume and destroy operations, which is difficult to achieve in practice. The vulnerability is in the dm-clone target which is not commonly used in enterprise deployments.
Package: kernel (Red Hat Enterprise Linux 10) -
Debian
CVE-2022-50843: linux - In the Linux kernel, the following vulnerability has been resolved: dm clone: F...
vendor_debian·2022
CVE-2022-50843 CVE-2022-50843: linux - In the Linux kernel, the following vulnerability has been resolved: dm clone: F...
In the Linux kernel, the following vulnerability has been resolved: dm clone: Fix UAF in clone_dtr() Dm_clone also has the same UAF problem when dm_resume() and dm_destroy() are concurrent. Therefore, cancelling timer again in clone_dtr().
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
No detection rules found.
No public exploits indexed.
Wiz
CVE-2022-50843 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50843 CVE-2022-50843 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50843 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
dm clone: Fix UAF in clone_dtr()
Dm_clone also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in clone_dtr().
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.8
Exploitation Probability (EPSS) N/A
Affected packages and libraries
linux-aws-fips
kernel-default-devel
Sources
NVD
Debian 11, 12, 13, 14 Has Fix Added at: Dec 31, 2025
Echo Has Fix Added at: Dec 31, 2025
Red Hat 9 Seve
Bugzilla
CVE-2022-50843 kernel: dm clone: Fix UAF in clone_dtr()
bugzilla·2025-12-30
CVE-2022-50843 [LOW] CVE-2022-50843 kernel: dm clone: Fix UAF in clone_dtr()
CVE-2022-50843 kernel: dm clone: Fix UAF in clone_dtr()
In the Linux kernel, the following vulnerability has been resolved:
dm clone: Fix UAF in clone_dtr()
Dm_clone also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in clone_dtr().
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123020-CVE-2022-50843-ae87@gregkh/T
https://git.kernel.org/stable/c/342cfd8426dff4228e6c714bcb9fc8295a2748ddhttps://git.kernel.org/stable/c/520b56cfd9faee7683f081c3a38f11a81b13a68ehttps://git.kernel.org/stable/c/856edd0e92f3fe89606b704c86a93daedddfe6echttps://git.kernel.org/stable/c/9e113cd4f61f3b0000843b2d0a90ce8b40a1fcffhttps://git.kernel.org/stable/c/b1ddb666073bb5f36390aaabaa1a4d48d78c52edhttps://git.kernel.org/stable/c/e4b5957c6f749a501c464f92792f1c8e26b61a94
2025-12-30
Published