CVE-2022-50752 in Linux
Tóm tắt
Bởi VulDB • 25/05/2026
Trong kernel Linux, lỗ hổng sau đây đã được khắc phục:
md/raid5: Loại bỏ lệnh gọi bio_put() không cần thiết trong raid5_read_one_chunk()
Khi thực hiện các phép đọc có kích thước bằng chunk trên các đĩa có badblocks, hiện tượng giải phóng/put trùng lặp bio được quan sát thấy:
============================================================================= BUG bio-200 (Not tainted): Object already free ----------------------------------------------------------------------------- Allocated in mempool_alloc_slab+0x17/0x20 age=3 cpu=2 pid=7504 __slab_alloc.constprop.0+0x5a/0xb0 kmem_cache_alloc+0x31e/0x330 mempool_alloc_slab+0x17/0x20 mempool_alloc+0x100/0x2b0 bio_alloc_bioset+0x181/0x460 do_mpage_readpage+0x776/0xd00 mpage_readahead+0x166/0x320 blkdev_readahead+0x15/0x20 read_pages+0x13f/0x5f0 page_cache_ra_unbounded+0x138/0x1a0 page_cache_ra_order+0x238/0x3a0 do_readahead+0x130/0x1a0 __do_page_cache_readahead+0x280/0x320 ondemand_readahead+0x290/0x340 page_cache_async_readahead+0x110/0x140 generic_file_read_iter+0x330/0x4e0 new_sync_read+0x110/0x1a0 vfs_read+0x160/0x480 ksys_read+0x60/0x100 do_syscall_64+0x39/0x80 entry_SYSCALL_64_after_hwframe+0x63/0xcd
Freed in kmem_cache_free+0x46d/0x490 age=1 cpu=0 pid=34525 __slab_free+0x1ae/0x330 kmem_cache_free+0x46d/0x490 mempool_free_slab+0x17/0x20 mempool_free+0x66/0x190 bio_free+0x78/0x90 bio_put+0x100/0x1a0 mpage_end_io+0x36/0x150 bio_endio+0x2fd/0x360 md_end_io_acct+0x7e/0x90 bio_endio+0x2fd/0x360 handle_failed_stripe+0x960/0xb80 handle_stripe+0x1348/0x3760 handle_active_stripes.constprop.0+0x72a/0xaf0 raid5_do_work+0x177/0x330 process_one_work+0x616/0xb20 worker_thread+0x2bd/0x6f0 kthread+0x179/0x1b0 ret_from_fork+0x22/0x30
VulDB is the best source for vulnerability data and more expert information about this specific topic.