CVE-2022-50843
dm clone: Fix UAF in clone_dtr()
N/A
Published: December 30, 2025 at 12:11 PM UTC
Updated: June 17, 2026 at 05:24 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%
Description
In the Linux kernel, the following vulnerability has been resolved: dm clone: Fix UAF in clone_dtr() Dm_clone also has the same UAF problem when dm_resume() and dm_destroy() are concurrent. Therefore, cancelling timer again in clone_dtr().
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
5.4 ≤ v < 5.10.1635.4 ≤ v < 5.15.875.4 ≤ v < 5.4.2295.4 ≤ v < 6.0.185.4 ≤ v < 6.1.45.4 ≤ v < 6.25.47431b7835f554f8608b415a02cf3c3f086309e02
Vendor states this is fixed in 342cfd8426dff4228e6c714bcb9fc8295a2748dd (fixed)
Vendor states this is fixed in 520b56cfd9faee7683f081c3a38f11a81b13a68e (fixed)
Vendor states this is fixed in 856edd0e92f3fe89606b704c86a93daedddfe6ec (fixed)
Vendor states this is fixed in 9e113cd4f61f3b0000843b2d0a90ce8b40a1fcff (fixed)
Vendor states this is fixed in b1ddb666073bb5f36390aaabaa1a4d48d78c52ed (fixed)
Vendor states this is fixed in e4b5957c6f749a501c464f92792f1c8e26b61a94 (fixed)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.87 (unaffected)
Vendor states this is fixed in 5.4 (unaffected)
Vendor states this is fixed in 5.4.229 (unaffected)
Vendor states this is fixed in 6.0.18 (unaffected)
Vendor states this is fixed in 6.1.4 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (6)
Quick Info
StatusDEFERRED
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card