Review reviewHigh

CVE-2022-50752

Linux

In the Linux kernel, the following vulnerability has been resolved: md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() When running chunk-sized reads on disks with badblocks duplicate bio free/puts are observed: ============================================================================= BUG bio-200 (Not tainted): Object already free ----------------------------------------------------------------------------- Allocated in mempool_alloc_slab+0x17/0x20 age=3 cpu=2 pid=7504 __slab_alloc.constprop.0+0x5a/0xb0 kmem_cache_alloc+0x31e/0x330 mempool_alloc_slab+0x17/0x20 mempool_allo...

CVSS: 7.8
EPSS: 0.17%
CISA KEV: Not listed
Published: 2025.12.24

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.17%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= c82aa1b76787c34fd02374e519b6f52cdeb2f54b < 7a37c58ee72e1fadd22c4ee990cb74c2ca2280e7, >= c82aa1b76787c34fd02374e519b6f52cdeb2f54b < c0fd5d4d8fd7b1a50306d7a23c720cf808f41fdf, >= c82aa1b76787c34fd02374e519b6f52cdeb2f54b < 21a9c7354aa59e97e26ece5f0a609c8bfa43020d, >= c82aa1b76787c34fd02374e519b6f52cdeb2f54b < c66a6f41e09ad386fd2cce22b9cded837bbbc704, >= 5.14
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: Not available