PT-2025-8245 · Linux+3 · Linux Kernel+3

Duoming Zhou

·

Publicado

2022-01-01

·

Atualizado

2026-03-14

·

CVE-2022-49311

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A deadlock issue has been identified in the Linux kernel, specifically in the rtw joinbss event prehandle() function. This occurs due to a lock being held by one thread while another thread attempts to acquire the same lock, resulting in a deadlock. The issue arises from the use of del timer sync() within the protection of spin lock bh(), which prevents the timer handler from obtaining the necessary lock. To resolve this, the del timer sync() call has been extracted from the lock protection, and spin lock bh() has been replaced with spin lock irq() in the rtw join timeout handler() function to prevent the deadlock.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-49311
SUSE-SU-2025:1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1027-1
SUSE-SU-2025_1241-1

Produtos afetados

Astra Linux
Debian
Linux Kernel
Suse