CVE-2022-50085: linux kernel — Fix

Description

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raid_resume There is a KASAN warning in raid_resume when running the lvm test lvconvert-raid.sh. The reason for the warning is that mddev->raid_disks is greater than rs->raid_disks, so the loop touches one entry beyond the allocated length.

Is your site exposed to CVE-2022-50085?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
linux	linux_kernel	4.8 — 4.14.291
linux	linux_kernel	4.15 — 4.19.256
linux	linux_kernel	4.20 — 5.4.211
linux	linux_kernel	5.5 — 5.10.137
linux	linux_kernel	5.11 — 5.15.61
linux	linux_kernel	5.16 — 5.18.18
linux	linux_kernel	5.19 — 5.19.2

References

Advisories & Patches

https://git.kernel.org/stable/c/2a9faa704d83ff0b04387e385efd8ae21cd95af6 https://git.kernel.org/stable/c/3bfdc95466f5be4d8d95db5a5b470d61641a7c24 https://git.kernel.org/stable/c/50235d9a1f1f742619ed9963cb9f240e5b821d46 https://git.kernel.org/stable/c/71f601c779b3cc1baf497796f5b922c3fe5d2a1e https://git.kernel.org/stable/c/74af83732a39ab7d3bc9b49219a535853e25679f https://git.kernel.org/stable/c/7dad24db59d2d2803576f2e3645728866a056dab https://git.kernel.org/stable/c/c2d47bef93fb74aa97d90f9a40ca657b8f376083 https://git.kernel.org/stable/c/c2f075e729636a44e98d9722e3852c2fa6fa49b6

Frequently Asked Questions

What is CVE-2022-50085? +

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raid_resume There is a KASAN warning in raid_resume when running the lvm test lvconvert-raid.sh. The reason for the warning is that mddev->raid_disks is greater than rs->raid_disks, so the loop touches one entry beyond the allocated length. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2022-50085? +

CVE-2022-50085 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2022-50085? +

CVE-2022-50085 affects products from linux, specifically: linux_kernel. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2022-50085? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-9588 10.0

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc. …

CVE-2025-57870 10.0

A SQL Injection vulnerability exists in Esri ArcGIS Server versions 11.3, 11.4 and 11.5 on Windows, Linux and Kubernetes. This …

CVE-2026-48286 10.0

Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result …

CVE-2026-13782 10.0

Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer …

CVE-2025-34028 10.0

The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when …

CVE-2026-48303 10.0

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result …

CVE-2022-50085