CVE-2022-50752
kernel: md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 24, 2025
Updated · August 5, 2026
Description
A double-free vulnerability was found in the Linux kernel's MD RAID5 driver. In raid5_read_one_chunk(), when encountering badblocks during chunk-sized reads, an unnecessary bio_put() is called. Since the bio is also freed by the common I/O completion path, this results in a double-free condition that can cause kernel crashes and memory corruption.
Statement
This flaw affects RAID5 arrays with disks that have recorded badblocks. The double-free occurs during read operations that encounter bad sectors, which triggers the error path containing the extraneous bio_put(). Systems using MD RAID5 with degraded or failing disks are more likely to encounter this issue.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1341 · Multiple Releases of Same Resource or Handle