CVE-2022-50085

dm raid: fix address sanitizer warning in raid_resume

HIGH

7.8

CVSS Score

Published: June 18, 2025 at 11:02 AM UTC

Updated: June 17, 2026 at 05:22 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raid_resume There is a KASAN warning in raid_resume when running the lvm test lvconvert-raid.sh. The reason for the warning is that mddev->raid_disks is greater than rs->raid_disks, so the loop touches one entry beyond the allocated length.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.15 ≤ v < 4.19.2564.20 ≤ v < 5.4.2114.8 ≤ v < 4.14.2914.8 ≤ v < 4.19.2564.8 ≤ v < 5.10.1374.8 ≤ v < 5.15.614.8 ≤ v < 5.18.184.8 ≤ v < 5.19.24.8 ≤ v < 5.4.2114.8 ≤ v < 6.05.11 ≤ v < 5.15.615.16 ≤ v < 5.18.185.19 ≤ v < 5.19.25.5 ≤ v < 5.10.13733e53f06850f44ec9722e08a993ecf8816e447a54.8

Vendor states this is fixed in 2a9faa704d83ff0b04387e385efd8ae21cd95af6 (fixed)

Vendor states this is fixed in 3bfdc95466f5be4d8d95db5a5b470d61641a7c24 (fixed)

Vendor states this is fixed in 50235d9a1f1f742619ed9963cb9f240e5b821d46 (fixed)

Vendor states this is fixed in 71f601c779b3cc1baf497796f5b922c3fe5d2a1e (fixed)

Vendor states this is fixed in 74af83732a39ab7d3bc9b49219a535853e25679f (fixed)

Vendor states this is fixed in 7dad24db59d2d2803576f2e3645728866a056dab (fixed)

Vendor states this is fixed in c2d47bef93fb74aa97d90f9a40ca657b8f376083 (fixed)

Vendor states this is fixed in c2f075e729636a44e98d9722e3852c2fa6fa49b6 (fixed)

Vendor states this is fixed in 4.14.291 (unaffected)

Vendor states this is fixed in 4.19.256 (unaffected)

Vendor states this is fixed in 4.8 (unaffected)

Vendor states this is fixed in 5.10.137 (unaffected)