|
Vulnerabilities
< Back

CVE-2022-50422

Updated on 01 Oct 2025

Severity

7.8 High severity

Details

CVSS score
7.8
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()

When executing SMP task failed, the smp_execute_task_sg() calls del_timer() to delete “slow_task->timer”. However, if the timer handler sas_task_internal_timedout() is running, the del_timer() in smp_execute_task_sg() will not stop it and a UAF will happen. The process is shown below:

(thread 1) | (thread 2) smp_execute_task_sg() | sas_task_internal_timedout() … | del_timer() | … | … sas_free_task(task) | kfree(task->slow_task) //FREE| | task->slow_task->… //USE

Fix by calling del_timer_sync() in smp_execute_task_sg(), which makes sure the timer handler have finished before the “task->slow_task” is deallocated.

Details

Affected product:
AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:
linux-hwe @ 4.15.0 (+17 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 9.2 ESU Released
15 kernels
  • 5.14.0-284.1101.el9_2.tuxcare.7.els20
  • 5.14.0-284.1101.el9_2.tuxcare.7.els21
  • 5.14.0-284.1101.el9_2.tuxcare.7.els23
  • 5.14.0-284.1101.el9_2.tuxcare.7.els22
  • 5.14.0-284.1101.el9_2.tuxcare.7.els14
  • 5.14.0-284.1101.el9_2.tuxcare.7.els18
  • 5.14.0-284.1101.el9_2.tuxcare.7.els16
  • 5.14.0-284.1101.el9_2.tuxcare.7.els15
  • 5.14.0-284.1101.el9_2.tuxcare.7.els17
  • 5.14.0-284.1101.el9_2.tuxcare.7.els19
  • 5.14.0-284.1101.el9_2.tuxcare.7.els24
  • 5.14.0-284.1101.el9_2.tuxcare.7.els25
  • 5.14.0-284.1101.el9_2.tuxcare.7.els26
  • 5.14.0-284.1101.el9_2.tuxcare.7.els27
  • 5.14.0-284.1101.el9_2.tuxcare.7.els28
AlmaLinux 9.6 ESU Released
3 kernels
  • 5.14.0-570.62.1.el9_6.tuxcare.1.els1
  • 5.14.0-570.62.1.el9_6.tuxcare.1.els2
  • 5.14.0-570.62.1.el9_6.tuxcare.1.els3
Amazon Linux 2 Released
113 kernels
  • 4.14.152-127.182.amzn2
  • 4.14.154-128.181.amzn2
  • 4.14.165-131.185.amzn2
  • 4.14.146-120.181.amzn2
  • 4.14.152-124.171.amzn2
  • 4.14.171-136.231.amzn2
  • 4.14.158-129.185.amzn2
  • 4.14.165-133.209.amzn2
  • 4.14.173-137.228.amzn2
  • 4.14.177-139.254.amzn2
  • 4.14.173-137.229.amzn2
  • 4.14.177-139.253.amzn2
  • 4.14.181-140.257.amzn2
  • 4.14.186-146.268.amzn2
  • 4.14.181-142.260.amzn2
  • 4.14.192-147.314.amzn2
  • 4.14.193-149.317.amzn2
  • 4.14.198-152.320.amzn2
  • 4.14.200-155.322.amzn2
  • 4.14.203-156.332.amzn2
  • 4.14.209-160.335.amzn2
  • 4.14.214-160.339.amzn2
  • 4.14.209-160.339.amzn2
  • 4.14.219-161.340.amzn2
  • 4.14.225-168.357.amzn2
  • 4.14.231-173.360.amzn2
  • 4.14.219-164.354.amzn2
  • 4.14.225-169.362.amzn2
  • 4.14.232-176.381.amzn2
  • 4.14.232-177.418.amzn2
  • 4.14.238-182.421.amzn2
  • 4.14.238-182.422.amzn2
  • 4.14.231-173.361.amzn2
  • 4.14.241-184.433.amzn2
  • 4.14.243-185.433.amzn2
  • 4.14.246-187.474.amzn2
  • 4.14.248-189.473.amzn2
  • 4.14.252-195.481.amzn2
  • 4.14.252-195.483.amzn2
  • 4.14.256-197.484.amzn2
  • 4.14.262-200.489.amzn2
  • 4.14.268-205.500.amzn2
  • 4.14.273-207.502.amzn2
  • 4.14.275-207.503.amzn2
  • 4.14.276-211.499.amzn2
  • 4.14.281-212.502.amzn2
  • 4.14.285-215.501.amzn2
  • 4.14.287-215.504.amzn2
  • 4.14.290-217.505.amzn2
  • 4.14.291-218.527.amzn2
  • 4.14.294-220.533.amzn2
  • 4.14.296-222.539.amzn2
  • 4.14.299-223.520.amzn2
  • 4.14.301-224.520.amzn2
  • 4.14.304-226.531.amzn2
  • 4.14.301-225.528.amzn2
  • 4.14.309-231.529.amzn2
  • 4.14.305-227.531.amzn2
  • 4.14.313-235.533.amzn2
  • 4.14.314-237.533.amzn2
  • 4.14.314-238.539.amzn2
  • 4.14.318-240.529.amzn2
  • 4.14.318-241.531.amzn2
  • 4.14.320-242.534.amzn2
  • 4.14.320-243.544.amzn2
  • 4.14.322-244.536.amzn2
  • 4.14.311-233.529.amzn2
  • 4.14.322-244.539.amzn2
  • 4.14.326-245.539.amzn2
  • 4.14.327-246.539.amzn2
  • 4.14.328-248.540.amzn2
  • 4.14.322-246.539.amzn2
  • 4.14.330-250.540.amzn2
  • 4.14.334-252.552.amzn2
  • 4.14.336-253.554.amzn2
  • 4.14.336-255.557.amzn2
  • 4.14.336-256.559.amzn2
  • 4.14.336-257.562.amzn2
  • 4.14.336-256.557.amzn2
  • 4.14.336-257.568.amzn2
  • 4.14.336-257.566.amzn2
  • 4.14.343-261.564.amzn2
  • 4.14.343-259.562.amzn2
  • 4.14.343-260.564.amzn2
  • 4.14.348-265.562.amzn2
  • 4.14.344-262.563.amzn2
  • 4.14.345-262.561.amzn2
  • 4.14.348-265.565.amzn2
  • 4.14.349-266.564.amzn2
  • 4.14.350-266.564.amzn2
  • 4.14.352-268.568.amzn2
  • 4.14.352-267.564.amzn2
  • 4.14.353-270.569.amzn2
  • 4.14.352-268.569.amzn2
  • 4.14.355-271.569.amzn2
  • 4.14.355-275.582.amzn2
  • 4.14.355-275.570.amzn2
  • 4.14.355-275.572.amzn2
  • 4.14.355-275.591.amzn2
  • 4.14.355-274.598.amzn2
  • 4.14.355-275.603.amzn2
  • 4.14.355-276.618.amzn2
  • 4.14.355-276.639.amzn2
  • 4.14.355-277.643.amzn2
  • 4.14.355-277.647.amzn2
  • 4.14.355-280.652.amzn2
  • 4.14.355-280.664.amzn2
  • 4.14.355-280.651.amzn2
  • 4.14.355-280.672.amzn2
  • 4.14.355-280.679.amzn2
  • 4.14.355-280.684.amzn2
  • 4.14.355-280.695.amzn2
  • 4.14.355-280.698.amzn2
Amazon Linux 2 5.10 Planned —
Amazon Linux 2 5.4 Planned —
CentOS 7 ELS Released
25 kernels
  • 3.10.0-1160.119.1.el7.tuxcare.els10
  • 3.10.0-1160.119.1.el7.tuxcare.els4
  • 3.10.0-1160.119.1.el7.tuxcare.els6
  • 3.10.0-1160.119.1.el7.tuxcare.els15
  • 3.10.0-1160.119.1.el7.tuxcare.els5
  • 3.10.0-1160.119.1.el7.tuxcare.els3
  • 3.10.0-1160.119.1.el7.tuxcare.els14
  • 3.10.0-1160.119.1.el7.tuxcare.els16
  • 3.10.0-1160.119.1.el7.tuxcare.els13
  • 3.10.0-1160.119.1.el7.tuxcare.els7
  • 3.10.0-1160.119.1.el7.tuxcare.els12
  • 3.10.0-1160.119.1.el7.tuxcare.els9
  • 3.10.0-1160.119.1.el7.tuxcare.els8
  • 3.10.0-1160.119.1.el7.tuxcare.els17
  • 3.10.0-1160.119.1.el7.tuxcare.els18
  • 3.10.0-1160.119.1.el7.tuxcare.els19
  • 3.10.0-1160.119.1.el7.tuxcare.els20
  • 3.10.0-1160.119.1.el7.tuxcare.els21
  • 3.10.0-1160.119.1.el7.tuxcare.els24
  • 3.10.0-1160.119.1.el7.tuxcare.els22
  • 3.10.0-1160.119.1.el7.tuxcare.els25
  • 3.10.0-1160.139.1.el7.tuxcare.els2
  • 3.10.0-1160.139.1.el7.tuxcare.els3
  • 3.10.0-1160.139.1.el7.tuxcare.els4
  • 3.10.0-1160.142.1.el7.tuxcare.els1
Ubuntu 20.04 Planned —
Ubuntu 22.04 Planned —