What’s Vulnerable › Vulnerabilities

CVE-2022-50402: drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() Check the return value of md_bitmap_get_counter() in case it returns NULL pointer, which will result in a null pointer dereference. v2: update the check to include other dereference

Affected products

• Linux kernel: from 3.5 before 4.19.270; from 4.20 before 5.4.229; from 5.5 before 5.10.163; from 5.11 before 5.15.86; from 5.16 before 6.0.16; from 6.1 before 6.1.2 — fixed in 4.19.270, 5.10.163, 5.15.86, 5.4.229, 6.0.16, 6.1.2

How to fix

Upgrade to a fixed version: Linux kernel 4.19.270, 5.10.163, 5.15.86, 5.4.229. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/100caacfa0ed26e061954c90cdc835d42f709536
• https://git.kernel.org/stable/c/21e9aac9a74d30907d44bae0d24c036cb3819406
• https://git.kernel.org/stable/c/3bd548e5b819b8c0f2c9085de775c5c7bff9052f
• https://git.kernel.org/stable/c/5d8d046f3dba939e74e2414f009df426700430ed
• https://git.kernel.org/stable/c/99bef41f8e8d1d52b5cb34f2f193f1346192752b
• https://git.kernel.org/stable/c/b621d17fe8b079574c773800148fb86907f3445d
• https://git.kernel.org/stable/c/ff3b7e12bc9f50de05c9d82b5b79e23e5be888f1

Get alerted when CVE-2022-50402 or the next vulnerability affects your stack