CVE-2022-50843

Summary

In the Linux kernel, the following vulnerability has been resolved:

dm clone: Fix UAF in clone_dtr()

Dm_clone also has the same UAF problem when dm_resume() and dm_destroy() are concurrent.

Therefore, cancelling timer again in clone_dtr().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux7431b7835f554f8608b415a02cf3c3f086309e02 < 520b56cfd9faee7683f081c3a38f11a81b13a68eaffected
LinuxLinux7431b7835f554f8608b415a02cf3c3f086309e02 < 342cfd8426dff4228e6c714bcb9fc8295a2748ddaffected
LinuxLinux7431b7835f554f8608b415a02cf3c3f086309e02 < 856edd0e92f3fe89606b704c86a93daedddfe6ecaffected
LinuxLinux7431b7835f554f8608b415a02cf3c3f086309e02 < b1ddb666073bb5f36390aaabaa1a4d48d78c52edaffected
LinuxLinux7431b7835f554f8608b415a02cf3c3f086309e02 < 9e113cd4f61f3b0000843b2d0a90ce8b40a1fcffaffected
LinuxLinux7431b7835f554f8608b415a02cf3c3f086309e02 < e4b5957c6f749a501c464f92792f1c8e26b61a94affected
LinuxLinux5.4affected
LinuxLinux0 < 5.4unaffected
LinuxLinux5.4.229 <= 5.4.*unaffected
LinuxLinux5.10.163 <= 5.10.*unaffected
LinuxLinux5.15.87 <= 5.15.*unaffected
LinuxLinux6.0.18 <= 6.0.*unaffected
LinuxLinux6.1.4 <= 6.1.*unaffected
LinuxLinux6.2 <= *unaffected

Weaknesses

References