Use-After-Free Vulnerability in Linux Kernel dm cache by Linux

CVE-2022-50496

What is CVE-2022-50496?

A use-after-free vulnerability exists in the 'dm cache' module of the Linux kernel, which could lead to potential security issues when the functions 'dm_resume()' and 'dm_destroy()' are executed concurrently. This vulnerability arises from a failure to properly manage the lifecycle of objects, particularly when timers are not canceled in the 'destroy()' function. Unauthorized access to system memory or unintended behavior may be possible as a result.

References