CVE-2022-50563

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a use-after-free condition within the dm thin subsystem, specifically in the run timer softirq() function. This issue arises when dm resume() and dm destroy() operations occur concurrently. The root cause is that dm resume() adds a timer while dm destroy() skips timer cancellation due to a suspended state. Subsequently, run timer softirq() is called after the memory pool has already been freed, leading to a use-after-free scenario. The issue can be reproduced by creating a thin-pool, suspending it, resuming it, and then attempting to remove all devices concurrently. The vulnerability occurs in the following functions: dm resume(), dm destroy(), run timer softirq(), and pool destroy().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.