CVE-2022-50715: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50715 is a NULL pointer dereference vulnerability in the Linux kernel's md/raid1 subsystem. The flaw occurs when a RAID1 array fails to run (e.g., assembled with only inactive disks), but the associated mdx_raid1 kernel thread is not stopped even after its resources have been released. This leads to a kernel NULL pointer dereference (Oops) when the system performs a poweroff or shutdown operation. The vulnerability was published on December 24, 2025, and affects the Linux kernel (specific stable branches). It carries an EPSS score of approximately 0.033% (CVE.org, VulDB).

The root cause is a missing cleanup step in the RAID1 array initialization failure path (CWE-476: NULL PointerEreference). When run_raid1() fails — for example, because all member disks are inactive — the mdx_raid1 kernel thread is started but never stopped on the error path. Subsequently, when the system shuts down, the thread attempts to call md_check_recovery() on an already-freed or uninitialized mddev structure, dereferencing a NULL pointer at offset 0x70. The kernel Oops trace shows the crash occurring in md_check_recovery+0x57/0x500 [md_mod] on kernel version 5.10.146. The fix involves ensuring the mdx_raid1 thread is properly stopped when the RAID1 array run fails (CVE.org, Kernel Git).

Successful triggering of this vulnerability causes a kernel panic (NULL pointer dereference Oops), resulting in a system crash and denial of service. The impact is limited to availability — there is no evidence of confidentiality or integrity compromise, and the vulnerability cannot be used for privilege escalation or remote code execution. The crash is triggered during system shutdown/poweroff on hosts running affected Linux kernel versions with a RAID1 array that failed to initialize properly (CVE.org).

• Logs/Kernel Messages: Kernel Oops messages containing BUG: kernel NULL pointer dereference, address: 0000000000000070 and stack traces referencing md_check_recovery in md_mod.
• Process: Presence of a md0_raid1 (or similar mdX_raid1) kernel thread running after a failed RAID1 array initialization.
• System Events: Unexpected system crash or reboot during poweroff/shutdown on systems with RAID1 arrays configured with inactive disks.

The fix is to apply the upstream Linux kernel patch that stops the mdx_raid1 thread when the RAID1 array run fails. Multiple stable kernel commits address this issue (e.g., commits 0c7c7468, 10d71353, 19d5a0e1, 22be4421, 110f14a7 in the stable kernel tree). SUSE has issued advisories (SUSE-2026-0263-1, SUSE-2026-0317-1, SUSE-2026-0411-1) addressing this CVE. Users should update to a patched kernel version provided by their Linux distribution. As a workaround, avoid assembling RAID1 arrays with only inactive member disks until a patched kernel is applied (Linux Security SUSE Advisory, CVE.org).