PT-2025-38329 · Linux+4 · Linux Kernel+4

Published 2023-05-09 · Updated 2025-12-01 · CVE-2022-50381

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3

Description A crash in the mempool free function within the Linux kernel's md (Multiple Devices) subsystem was resolved. The crash occurred during the execution of the lvm test shell/lvchange-rebuild-raid.sh. The root cause was a race condition between the super written function and bio operations, leading to an attempt to free memory into a destroyed bio set. The fix involves reordering operations to ensure bio put is called before decrementing the number of in-progress bios in both md end flush and super written.

Recommendations Update to a version later than 6.1.0-rc3 to resolve this issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

BDU:2026-06027

CESA-2023_2951

CVE-2022-50381

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:03613-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

SUSE-SU-2025:4315-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1027

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50381.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b5be563b4356b3089b3245d024cae3f248ba7090 · Patch
• https://git.kernel.org/stable/c/cf06b162f5b6337b688072a1a47941280b8f7110 · Patch
• https://git.kernel.org/stable/c/91bd504128a51776472445070e11a3b0f9348c90 · Patch
• https://git.kernel.org/stable/c/ae7793027766491c5f8635b12d15a5940d3b8698 · Patch
• https://git.kernel.org/stable/c/341097ee53573e06ab9fc675d96a052385b851fa · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://git.kernel.org/stable/c/842f222fc42a9239831e15b1fd49a51c546902cb · Patch
• https://git.kernel.org/stable/c/97ce99984be12b9acb49ddce0f5d8ebb037adbb6 · Patch
• https://git.kernel.org/stable/c/384ef33d37cefb2ac539d44597d03f06c9b8975c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50381 · Vendor Advisory