CVE-2022-50022

A use-after-free bug exists in the linux kernel such that in the line "raid5_release_stripe(sh);" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines "if (sh->batch_head && sh != sh->batch_head)" resulting in a minor application crash.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and the presence of active MD RAID 4/5/6 storage configurations under specific stripe batching conditions. Although the flaw involves a use-after-free condition in the kernel's software RAID subsystem that could lead to a system crash or privilege escalation, triggering it requires local access to interact with or induce race conditions in the block storage layer. Systems not utilizing Linux software RAID-5 or RAID-6 arrays are not exposed to this issue during normal operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.