PT-2025-38336
CVE-2022-50388
·
Published
2022-12-22
·
Updated
2025-11-28
Description by
CVSS 2.0
6.0
MediumMetricsAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Linux Kernel versions prior to 5.15.67
Description
A flaw exists in the Linux kernel's NVMe subsystem related to handling flush requests when blktrace is enabled with multipath activated. Specifically, a NULL pointer dereference within the
blk add trace bio complete function can occur, leading to a kernel crash. This issue arises when a flush request with a NULL bio is processed during I/O completion.Recommendations
Update the Linux Kernel to a version newer than 5.15.67 to resolve this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾