Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2022-50563: Linux kernel dm‑thin may crash when resumed and destroyed together
CVE-2022-50563 · published 1 year ago
Summary
The dm‑thin storage module in certain Linux kernels (including Ubuntu Azure, AWS, and LTS Xenial builds) can cause a crash if a resume operation and a destroy operation happen at the same time. This can lead to the system trying to use memory that has already been released, potentially causing instability. Apply the latest kernel updates from your distribution to get the fix.
What to do
- Update canonical linux-azure to version 4.15.0-1162.177~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1153.166~16.04.1.
- Update canonical linux-azure to version 4.15.0-1162.177~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1147.163~16.04.1.
- Update canonical linux-hwe to version 4.15.0-208.219~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1116.127~16.04.1.
- Update canonical linux to version 4.15.0-208.220.
- Update canonical linux-aws to version 4.15.0-1153.166.
- Update canonical linux-aws-5.4 to version 5.4.0-1097.105~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1162.177.
- Update canonical linux-azure-5.4 to version 5.4.0-1104.110~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1147.163.
- Update canonical linux-gcp-5.4 to version 5.4.0-1101.110~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-144.161~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1045.50~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1137.142.
- Update canonical linux-oracle to version 4.15.0-1116.127.
- Update canonical linux-oracle-5.4 to version 5.4.0-1094.103~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1081.92~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2092.98.
- Update canonical linux-azure-fips to version 4.15.0-2071.77.
- Update canonical linux-fips to version 4.15.0-1108.119.
- Update canonical linux-gcp-fips to version 4.15.0-2055.60.
- Update canonical linux to version 5.4.0-144.161.
- Update canonical linux-aws to version 5.4.0-1097.105.
- Update canonical linux-aws-5.15 to version 5.15.0-1033.37~20.04.1.
- Update canonical linux-azure to version 5.4.0-1104.110.
- Update canonical linux-azure-5.15 to version 5.15.0-1035.42~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1059.65.
- Update canonical linux-gcp to version 5.4.0-1101.110.
- Update canonical linux-gcp-5.15 to version 5.15.0-1031.38~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-69.76~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1045.50.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1027.32~20.04.1.
- Update canonical linux-iot to version 5.4.0-1013.15.
- Update canonical linux-kvm to version 5.4.0-1087.93.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-69.76~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1014.14~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1094.103.
- Update canonical linux-oracle-5.15 to version 5.15.0-1032.38~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1081.92.
- Update canonical linux-riscv-5.15 to version 5.15.0-1030.34~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1022.26.
- Update canonical linux-aws-fips to version 5.4.0-1099.107+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1104.110+fips1.
- Update canonical linux-fips to version 5.4.0-1073.82.
- Update canonical linux-gcp-fips to version 5.4.0-1101.110+fips1.
- Update canonical linux to version 5.15.0-69.76.
- Update canonical linux-aws to version 5.15.0-1033.37.
- Update canonical linux-azure to version 5.15.0-1035.42.
- Update canonical linux-gcp to version 5.15.0-1031.38.
- Update canonical linux-gke to version 5.15.0-1030.35.
- Update canonical linux-gkeop to version 5.15.0-1017.22.
- Update canonical linux-ibm to version 5.15.0-1027.30.
- Update canonical linux-intel-iotg to version 5.15.0-1027.32.
- Update canonical linux-kvm to version 5.15.0-1030.35.
- Update canonical linux-lowlatency to version 5.15.0-69.76.
- Update canonical linux-nvidia to version 5.15.0-1023.23.
- Update canonical linux-oracle to version 5.15.0-1032.38.
- Update canonical linux-raspi to version 5.15.0-1026.28.
- Update canonical linux-bluefield to version 5.15.0-1015.17.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1023.28.
- Update canonical linux-realtime to version 5.15.0-1034.37.
- Update canonical linux-azure-fde to version 5.15.0-1035.42.1.
- Update debian linux to version 6.1.4-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1162.177~14.04.1 Fix: upgrade to 4.15.0-1162.177~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1153.166~16.04.1 Fix: upgrade to 4.15.0-1153.166~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1162.177~16.04.1 Fix: upgrade to 4.15.0-1162.177~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1147.163~16.04.1 Fix: upgrade to 4.15.0-1147.163~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-208.219~16.04.1 Fix: upgrade to 4.15.0-208.219~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1116.127~16.04.1 Fix: upgrade to 4.15.0-1116.127~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-208.220 Fix: upgrade to 4.15.0-208.220
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1153.166 Fix: upgrade to 4.15.0-1153.166
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1097.105~18.04.1 Fix: upgrade to 5.4.0-1097.105~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1162.177 Fix: upgrade to 4.15.0-1162.177
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1104.110~18.04.1 Fix: upgrade to 5.4.0-1104.110~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1147.163 Fix: upgrade to 4.15.0-1147.163
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1101.110~18.04.1 Fix: upgrade to 5.4.0-1101.110~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-144.161~18.04.1 Fix: upgrade to 5.4.0-144.161~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1045.50~18.04.1 Fix: upgrade to 5.4.0-1045.50~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1137.142 Fix: upgrade to 4.15.0-1137.142
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1116.127 Fix: upgrade to 4.15.0-1116.127
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1094.103~18.04.1 Fix: upgrade to 5.4.0-1094.103~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1081.92~18.04.1 Fix: upgrade to 5.4.0-1081.92~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2092.98 Fix: upgrade to 4.15.0-2092.98
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2071.77 Fix: upgrade to 4.15.0-2071.77
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1108.119 Fix: upgrade to 4.15.0-1108.119
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2055.60 Fix: upgrade to 4.15.0-2055.60
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-144.161 Fix: upgrade to 5.4.0-144.161
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1097.105 Fix: upgrade to 5.4.0-1097.105
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1033.37~20.04.1 Fix: upgrade to 5.15.0-1033.37~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1104.110 Fix: upgrade to 5.4.0-1104.110
|
Showing 50 of 156. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1035.42~20.04.1 Fix: upgrade to 5.15.0-1035.42~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1059.65 Fix: upgrade to 5.4.0-1059.65
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1101.110 Fix: upgrade to 5.4.0-1101.110
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1031.38~20.04.1 Fix: upgrade to 5.15.0-1031.38~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-69.76~20.04.1 Fix: upgrade to 5.15.0-69.76~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1045.50 Fix: upgrade to 5.4.0-1045.50
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1027.32~20.04.1 Fix: upgrade to 5.15.0-1027.32~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1013.15 Fix: upgrade to 5.4.0-1013.15
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1087.93 Fix: upgrade to 5.4.0-1087.93
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-69.76~20.04.1 Fix: upgrade to 5.15.0-69.76~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1014.14~20.04.1 Fix: upgrade to 5.15.0-1014.14~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1094.103 Fix: upgrade to 5.4.0-1094.103
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1032.38~20.04.1 Fix: upgrade to 5.15.0-1032.38~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1081.92 Fix: upgrade to 5.4.0-1081.92
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1030.34~20.04.1 Fix: upgrade to 5.15.0-1030.34~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1022.26 Fix: upgrade to 5.4.0-1022.26
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1099.107+fips1 Fix: upgrade to 5.4.0-1099.107+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1104.110+fips1 Fix: upgrade to 5.4.0-1104.110+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1073.82 Fix: upgrade to 5.4.0-1073.82
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1101.110+fips1 Fix: upgrade to 5.4.0-1101.110+fips1
|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-69.76 Fix: upgrade to 5.15.0-69.76
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1033.37 Fix: upgrade to 5.15.0-1033.37
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1035.42 Fix: upgrade to 5.15.0-1035.42
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1031.38 Fix: upgrade to 5.15.0-1031.38
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1030.35 Fix: upgrade to 5.15.0-1030.35
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1017.22 Fix: upgrade to 5.15.0-1017.22
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1027.30 Fix: upgrade to 5.15.0-1027.30
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1027.32 Fix: upgrade to 5.15.0-1027.32
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1030.35 Fix: upgrade to 5.15.0-1030.35
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-69.76 Fix: upgrade to 5.15.0-69.76
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1023.23 Fix: upgrade to 5.15.0-1023.23
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1032.38 Fix: upgrade to 5.15.0-1032.38
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1026.28 Fix: upgrade to 5.15.0-1026.28
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1015.17 Fix: upgrade to 5.15.0-1015.17
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1023.28 Fix: upgrade to 5.15.0-1023.28
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1034.37 Fix: upgrade to 5.15.0-1034.37
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1035.42.1 Fix: upgrade to 5.15.0-1035.42.1
|
| Debian:12 | debian | linux |
< 6.1.4-1 Fix: upgrade to 6.1.4-1
|
Original advisory text
In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix UAF in run_timer_softirq() When dm_resume() and dm_destroy() are concurrent, it will lead to UAF, as follows: BUG: ...
In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix UAF in run_timer_softirq() When dm_resume() and dm_destroy() are concurrent, it will lead to UAF, as follows: BUG: KASAN: use-after-free in __run_timers+0x173/0x710 Write of size 8 at addr ffff88816d9490f0 by task swapper/0/0 <snip> Call Trace: <IRQ> dump_stack_lvl+0x73/0x9f print_report.cold+0x132/0xaa2 _raw_spin_lock_irqsave+0xcd/0x160 __run_timers+0x173/0x710 kasan_report+0xad/0x110 __run_timers+0x173/0x710 __asan_store8+0x9c/0x140 __run_timers+0x173/0x710 call_timer_fn+0x310/0x310 pvclock_clocksource_read+0xfa/0x250 kvm_clock_read+0x2c/0x70 kvm_clock_get_cycles+0xd/0x20 ktime_get+0x5c/0x110 lapic_next_event+0x38/0x50 clockevents_program_event+0xf1/0x1e0 run_timer_softirq+0x49/0x90 __do_softirq+0x16e/0x62c __irq_exit_rcu+0x1fa/0x270 irq_exit_rcu+0x12/0x20 sysvec_apic_timer_interrupt+0x8e/0xc0 One of the concurrency UAF can be shown as below: use free do_resume | __find_device_hash_cell | dm_get | atomic_inc(&md->holders) | | dm_destroy | __dm_destroy | if (!dm_suspended_md(md)) | atomic_read(&md->holders) | msleep(1) dm_resume | __dm_resume | dm_table_resume_targets | pool_resume | do_waker #add delay work | dm_put | atomic_dec(&md->holders) | | dm_table_destroy | pool_dtr | __pool_dec | __pool_destroy | destroy_workqueue | kfree(pool) # free pool time out __do_softirq run_timer_softirq # pool has already been freed This can be easily reproduced using: 1. create thin-pool 2. dmsetup suspend pool 3. dmsetup resume pool 4. dmsetup remove_all # Concurrent with 3 The root cause of this UAF bug is that dm_resume() adds timer after dm_destroy() skips cancelling the timer because of suspend status. After timeout, it will call run_timer_softirq(), however pool has already been freed. The concurrency UAF bug will happen. Therefore, cancelling timer again in __pool_destroy().
References
- https://ubuntu.com/security/CVE-2022-50563 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-50563 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-50563 Vendor Advisory
- https://git.kernel.org/stable/c/7ee059d06a5d3c15465959e0472993e80fbe4e81 Third Party Advisory
- https://git.kernel.org/stable/c/88430ebcbc0ec637b710b947738839848c20feff Third Party Advisory
- https://git.kernel.org/stable/c/e8b8e0d2bbf7d1172c4f435621418e29ee408d46 Third Party Advisory
- https://git.kernel.org/linus/88430ebcbc0ec637b710b947738839848c20feff Third Party Advisory
- https://git.kernel.org/stable/c/34cd15d83b7206188d440b29b68084fcafde9395 Third Party Advisory
- https://git.kernel.org/stable/c/34fe9c2251f19786a6689149a6212c6c0de1d63b Third Party Advisory
- https://git.kernel.org/stable/c/550a4fac7ecfee5bac6a0dd772456ca62fb72f46 Third Party Advisory
- https://git.kernel.org/stable/c/7ae6aa649394e1e7f6dafb55ce0d578c0572a280 Third Party Advisory
- https://git.kernel.org/stable/c/94e231c9d6f2648d2f1f68e7f476e050ee0a6159 Third Party Advisory
- https://git.kernel.org/stable/c/d9971fa4d8bde63d49c743c1b32d12fbbd3a30bd Third Party Advisory
Timeline
Published22 Oct 2025
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta