CVE-2022-50496

dm cache: Fix UAF in destroy()

HIGH

7.8

CVSS Score

Published: October 4, 2025 at 03:43 PM UTC

Updated: June 17, 2026 at 05:23 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: dm cache: Fix UAF in destroy() Dm_cache also has the same UAF problem when dm_resume() and dm_destroy() are concurrent. Therefore, cancelling timer again in destroy().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.9 ≤ v < 4.14.3033.9 ≤ v < 4.19.2703.9 ≤ v < 4.9.3373.9 ≤ v < 5.10.1633.9 ≤ v < 5.15.873.9 ≤ v < 5.4.2293.9 ≤ v < 6.0.183.9 ≤ v < 6.1.43.9 ≤ v < 6.24.10 ≤ v < 4.14.3034.15 ≤ v < 4.19.2704.20 ≤ v < 5.4.2295.11 ≤ v < 5.15.875.16 ≤ v < 6.0.185.5 ≤ v < 5.10.1636.1 ≤ v < 6.1.43.9c6b4fcbad044e6fffcc75bba160e720eb8d67d17

Vendor states this is fixed in 2b17026685a270b2beaf1cdd9857fcedd3505c7e (fixed)

Vendor states this is fixed in 2f097dfac7579fd84ff98eb1d3acd41d53a485f3 (fixed)

Vendor states this is fixed in 34cbc8d3b47a56acd89453c29632a9c117de9d (fixed)

Vendor states this is fixed in 4d20032dd90664de09f2902a7ea49ae2f7771746 (fixed)

Vendor states this is fixed in 6a3e412c2ab131c54945327a7676b006f000a209 (fixed)

Vendor states this is fixed in 6a459d8edbdbe7b24db42a5a9f21e6aa9e00c2aa (fixed)

Vendor states this is fixed in 6ac4f36910764cb510bafc4c3768544f86ca48ca (fixed)

Vendor states this is fixed in 993406104d2b28fe470126a062ad37a1e21e792e (fixed)

Vendor states this is fixed in d2a0b298ebf83ab6236f66788a3541e91ce75a70 (fixed)

Vendor states this is fixed in 3.9 (unaffected)

Vendor states this is fixed in 4.14.303 (unaffected)

Vendor states this is fixed in 4.19.270 (unaffected)