PT-2025-26142 · Linux · Linux Kernel

Published 2025-06-18 · Updated 2026-05-26 · CVE-2022-50216

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc2

Description A use-after-free issue in the Linux kernel's md-raid module can be triggered when the md bitmap destroy function is called before the thread is destroyed, potentially causing a kernel panic. This issue was identified during an lvm test with kasan enabled. The problem arises from the commit 48df498daf62, which was intended for md-cluster, suggesting a potential need for an additional bugfix.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the md-raid module. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-50216

Affected Products

Linux Kernel

References · 13

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50216 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50216 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50216 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50216 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50216 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50216 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50216 · Vendor Advisory
• https://git.kernel.org/stable/c/7f82027b6b74553f7fe8541c0a04bfbd3557fb11 · Note
• https://git.kernel.org/stable/c/f192434601b9a1ef072b8ad631d6008fea578234 · Note
• https://git.kernel.org/stable/c/e151db8ecfb019b7da31d076130a794574c89f6f · Note
• https://git.kernel.org/stable/c/c5e4cdd4438787e008c1b4a23bb66e49f4b12417 · Note
• https://t.me/cvetracker/26488 · Telegram Post
• https://git.kernel.org/stable/c/e0bdaed154e5b9cc4310ddaf5da290483d00e6ba · Note