CVE-2022-49384

A flaw was found in the MD driver, where the io_acct_set bioset was being allocated and freed within the personality module. However, additional free operations were incorrectly implemented in the md_free and md_stop functions. This redundancy led to a double-free condition, potentially causing memory corruption or system instability.

The out of box configuration of Red Hat Enterprise Linux does not allow access to md devices to non privileged users. Therefore, Red Hat Product Security has classified this bug as PR:H.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.