CVE-2022-50085

dm raid: fix address sanitizer warning in raid_resume

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dm raid: fix address sanitizer warning in raid_resume

There is a KASAN warning in raid_resume when running the lvm test lvconvert-raid.sh. The reason for the warning is that mddev->raid_disks is greater than rs->raid_disks, so the loop touches one entry beyond the allocated length.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 33e53f06850f44ec9722e08a993ecf8816e447a5 to before c2f075e729636a44e98d9722e3852c2fa6fa49b6Affected
  • 33e53f06850f44ec9722e08a993ecf8816e447a5 to before 3bfdc95466f5be4d8d95db5a5b470d61641a7c24Affected
  • 33e53f06850f44ec9722e08a993ecf8816e447a5 to before 71f601c779b3cc1baf497796f5b922c3fe5d2a1eAffected
  • 33e53f06850f44ec9722e08a993ecf8816e447a5 to before c2d47bef93fb74aa97d90f9a40ca657b8f376083Affected
  • 33e53f06850f44ec9722e08a993ecf8816e447a5 to before 50235d9a1f1f742619ed9963cb9f240e5b821d46Affected
  • 33e53f06850f44ec9722e08a993ecf8816e447a5 to before 74af83732a39ab7d3bc9b49219a535853e25679fAffected
  • 33e53f06850f44ec9722e08a993ecf8816e447a5 to before 2a9faa704d83ff0b04387e385efd8ae21cd95af6Affected
  • 33e53f06850f44ec9722e08a993ecf8816e447a5 to before 7dad24db59d2d2803576f2e3645728866a056dabAffected
LinuxLinux
  • 4.8Affected
  • before 4.8Not affected
  • 4.14.291 through 4.14.*Not affected
  • 4.19.256 through 4.19.*Not affected
  • 5.4.211 through 5.4.*Not affected
  • 5.10.137 through 5.10.*Not affected
  • 5.15.61 through 5.15.*Not affected
  • 5.18.18 through 5.18.*Not affected
  • 5.19.2 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.