Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-50840 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snic_tgt_create() Smatch reports a warning as follows: drivers/scsi/snic/snic_disc.c:307 snic_tgt_create() warn: '&tgt->list' not removed from list If device_add() fails in snic_tgt_create(), tgt will be freed, but tgt->list will not be removed from snic->disc.tgt_list, then list traversal may cause UAF. Remove from snic->disc.tgt_list before free().

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/1895e908b3ae66a5312fd1b2cdda2da82993dca7 kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/3007f96ca20c848d0b1b052df6d2cb5ae5586e78 kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/3772319e40527e6a5f2ec1d729e01f271d818f5c kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/4141cd9e8b3379aea52a85d2c35f6eaf26d14e86 kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/6866154c23fba40888ad6d554cccd4bf2edb755e kernel.orgSource CodeVendor

see all 9 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

ProductVersions
Linux kernel
All versions

CPE

  • cpe:2.3:o:kernel:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:endpoint_security_linux_threat_prevention:*:*
  • cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • Upgrade: linux-1895e908b3ae66a5312fd1b2cdda2da82993dca7.tar.gzmoderate effort
  • Upgrade: linux-3007f96ca20c848d0b1b052df6d2cb5ae5586e78.tar.gzmoderate effort
  • Upgrade: linux-3772319e40527e6a5f2ec1d729e01f271d818f5c.tar.gzmoderate effort
  • Upgrade: linux-4141cd9e8b3379aea52a85d2c35f6eaf26d14e86.tar.gzmoderate effort
  • Upgrade: linux-6866154c23fba40888ad6d554cccd4bf2edb755e.tar.gzmoderate effort
  • Upgrade: linux-ad27f74e901fc48729733c88818e6b96c813057d.tar.gzmoderate effort
  • Upgrade: linux-c7f0f8dab1ae5def57c1a8a9cafd6fabe1dc27cc.tar.gzmoderate effort
Cisco SCSI HBA
All versions

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • No remediation found in references.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-50840
NVD Published Date:
Dec 30, 2025
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2022-50840 Details - Not Deferred