CVE-2022-50506
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-50506
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50506.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-50506
- Downstream
- Published
- 2025-10-04T15:43:54Z
- Modified
- 2025-10-21T13:01:00.680434Z
- Summary
- drbd: only clone bio if we have a backing device
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drbd: only clone bio if we have a backing device
Commit c347a787e34cb (drbd: set ->bibdev in drbdreqnew) moved a biosetdev call (which has since been removed) to "earlier", from drbdrequestprepare to drbdreq_new.
The problem is that this accesses device->ldev->backing_bdev, which is not NULL-checked at this point. When we don't have an ldev (i.e. when the DRBD device is diskless), this leads to a null pointer deref.
So, only allocate the private_bio if we actually have a disk. This is also a small optimization, since we don't clone the bio to only to immediately free it again in the diskless case.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc347a787e34cba0e5a80a04082dacaf259105605Fixed05580a3bbf3cec677cb00a85dfeb21d6a9b48eaf
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc347a787e34cba0e5a80a04082dacaf259105605Fixed6d42ddf7f27b6723549ee6d4c8b1b418b59bf6b5
Affected versions
v5.*
v5.17
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v6.*
v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
Database specific
vanir_signatures
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05580a3bbf3cec677cb00a85dfeb21d6a9b48eaf",
"id": "CVE-2022-50506-0960cd44",
"deprecated": false,
"target": {
"function": "drbd_req_new",
"file": "drivers/block/drbd/drbd_req.c"
},
"signature_version": "v1",
"digest": {
"length": 1088.0,
"function_hash": "28578817823263537681036978581430452915"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05580a3bbf3cec677cb00a85dfeb21d6a9b48eaf",
"id": "CVE-2022-50506-12f001b1",
"deprecated": false,
"target": {
"file": "drivers/block/drbd/drbd_req.c"
},
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"273353339412522568083962768688647269470",
"249396980206438467037159478815141866323",
"182508982502361865668759978336064593482",
"248619799282761034531349029641471393871",
"328577400407483840828453406684938964584",
"159116626837836184141967426603297158711",
"73071378800687195253139654074533155265",
"295488000377150139867037247962046220363",
"80604130458035220378733228124494545249",
"98380271705765823962244854761941948571",
"194092820256586863600867331735484727604",
"318069575134606330689076725027053071544",
"243410062030605036258462765116737303717"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05580a3bbf3cec677cb00a85dfeb21d6a9b48eaf",
"id": "CVE-2022-50506-324a6237",
"deprecated": false,
"target": {
"function": "drbd_request_prepare",
"file": "drivers/block/drbd/drbd_req.c"
},
"signature_version": "v1",
"digest": {
"length": 980.0,
"function_hash": "283779788592217632915357260091410405257"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d42ddf7f27b6723549ee6d4c8b1b418b59bf6b5",
"id": "CVE-2022-50506-9bda1ac0",
"deprecated": false,
"target": {
"function": "drbd_request_prepare",
"file": "drivers/block/drbd/drbd_req.c"
},
"signature_version": "v1",
"digest": {
"length": 980.0,
"function_hash": "283779788592217632915357260091410405257"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d42ddf7f27b6723549ee6d4c8b1b418b59bf6b5",
"id": "CVE-2022-50506-bd6e5da8",
"deprecated": false,
"target": {
"function": "drbd_req_new",
"file": "drivers/block/drbd/drbd_req.c"
},
"signature_version": "v1",
"digest": {
"length": 1088.0,
"function_hash": "28578817823263537681036978581430452915"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d42ddf7f27b6723549ee6d4c8b1b418b59bf6b5",
"id": "CVE-2022-50506-f3aa9282",
"deprecated": false,
"target": {
"file": "drivers/block/drbd/drbd_req.c"
},
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"273353339412522568083962768688647269470",
"249396980206438467037159478815141866323",
"182508982502361865668759978336064593482",
"248619799282761034531349029641471393871",
"328577400407483840828453406684938964584",
"159116626837836184141967426603297158711",
"73071378800687195253139654074533155265",
"295488000377150139867037247962046220363",
"80604130458035220378733228124494545249",
"98380271705765823962244854761941948571",
"194092820256586863600867331735484727604",
"318069575134606330689076725027053071544",
"243410062030605036258462765116737303717"
]
},
"signature_type": "Line"
}
]