CVE-2022-50843

A use-after-free vulnerability was found in the device-mapper clone target. When dm_resume() and dm_destroy() execute concurrently, a timer may fire after the clone target structure has been freed, leading to use-after-free.

Exploitation requires precise timing between device-mapper resume and destroy operations, which is difficult to achieve in practice. The vulnerability is in the dm-clone target which is not commonly used in enterprise deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.