CVE Database›CVE-2022-50752

CVE-2022-50752

kernel: md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk()

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 24, 2025

Updated · August 5, 2026

Description

A double-free vulnerability was found in the Linux kernel's MD RAID5 driver. In raid5_read_one_chunk(), when encountering badblocks during chunk-sized reads, an unnecessary bio_put() is called. Since the bio is also freed by the common I/O completion path, this results in a double-free condition that can cause kernel crashes and memory corruption.

Statement

This flaw affects RAID5 arrays with disks that have recorded badblocks. The double-free occurs during read operations that encounter bad sectors, which triggers the error path containing the extraneous bio_put(). Systems using MD RAID5 with degraded or failing disks are more likely to encounter this issue.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-1341 · Multiple Releases of Same Resource or Handle