CVE-2022-50086

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the block layer and the blk-rq-qos framework. The issue occurs when the io.cost.qos file is written by two CPUs concurrently, potentially leading to list add/del corruptions of the inner walk list in the ioc timer fn function. This happens because two iocs may be enabled and running on one disk, owning different iocgs on their active list, and overwriting each other's root iocg's walk list. The vulnerability is related to the rq qos add function and the ioc variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.