CVE-2022-50402

drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()

Check the return value of md_bitmap_get_counter() in case it returns NULL pointer, which will result in a null pointer dereference.

v2: update the check to include other dereference

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before 21e9aac9a74d30907d44bae0d24c036cb3819406Affected d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before 5d8d046f3dba939e74e2414f009df426700430edAffected d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before 100caacfa0ed26e061954c90cdc835d42f709536Affected d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before b621d17fe8b079574c773800148fb86907f3445dAffected d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before ff3b7e12bc9f50de05c9d82b5b79e23e5be888f1Affected d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before 99bef41f8e8d1d52b5cb34f2f193f1346192752bAffected d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before 3bd548e5b819b8c0f2c9085de775c5c7bff9052fAffected
LinuxLinux	3.5Affected before 3.5Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before 21e9aac9a74d30907d44bae0d24c036cb3819406Affected
d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before 5d8d046f3dba939e74e2414f009df426700430edAffected
d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before 100caacfa0ed26e061954c90cdc835d42f709536Affected
d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before b621d17fe8b079574c773800148fb86907f3445dAffected
d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before ff3b7e12bc9f50de05c9d82b5b79e23e5be888f1Affected
d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before 99bef41f8e8d1d52b5cb34f2f193f1346192752bAffected
d60b479d177a5735b6b4db6ee5280ef6653f50e7 to before 3bd548e5b819b8c0f2c9085de775c5c7bff9052fAffected

LinuxLinux

3.5Affected
before 3.5Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.