Riskcovery

CVE-2022-50496

dm cache: Fix UAF in destroy()

State
Published
Severity
Not scored
Published
Oct 4, 2025
Updated
May 11, 2026
Reserved
Oct 4, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dm cache: Fix UAF in destroy()

Dm_cache also has the same UAF problem when dm_resume() and dm_destroy() are concurrent.

Therefore, cancelling timer again in destroy().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c6b4fcbad044e6fffcc75bba160e720eb8d67d17 to before 034cbc8d3b47a56acd89453c29632a9c117de09dAffected
  • c6b4fcbad044e6fffcc75bba160e720eb8d67d17 to before 993406104d2b28fe470126a062ad37a1e21e792eAffected
  • c6b4fcbad044e6fffcc75bba160e720eb8d67d17 to before 4d20032dd90664de09f2902a7ea49ae2f7771746Affected
  • c6b4fcbad044e6fffcc75bba160e720eb8d67d17 to before 2f097dfac7579fd84ff98eb1d3acd41d53a485f3Affected
  • c6b4fcbad044e6fffcc75bba160e720eb8d67d17 to before 2b17026685a270b2beaf1cdd9857fcedd3505c7eAffected
  • c6b4fcbad044e6fffcc75bba160e720eb8d67d17 to before d2a0b298ebf83ab6236f66788a3541e91ce75a70Affected
  • c6b4fcbad044e6fffcc75bba160e720eb8d67d17 to before 6ac4f36910764cb510bafc4c3768544f86ca48caAffected
  • c6b4fcbad044e6fffcc75bba160e720eb8d67d17 to before 6a3e412c2ab131c54945327a7676b006f000a209Affected
  • c6b4fcbad044e6fffcc75bba160e720eb8d67d17 to before 6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aaAffected
LinuxLinux
  • 3.9Affected
  • before 3.9Not affected
  • 4.9.337 through 4.9.*Not affected
  • 4.14.303 through 4.14.*Not affected
  • 4.19.270 through 4.19.*Not affected
  • 5.4.229 through 5.4.*Not affected
  • 5.10.163 through 5.10.*Not affected
  • 5.15.87 through 5.15.*Not affected
  • 6.0.18 through 6.0.*Not affected
  • 6.1.4 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.