PT-2025-25912 · Linux+4 · Linux Kernel+4

Published 2022-08-11 · Updated 2025-07-28 · CVE-2022-49986

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.0-1086-azure #91~18.04.1-Ubuntu

Description The issue is related to the storvsc error wq workqueue in the Linux kernel, which was incorrectly marked as WQ MEM RECLAIM. This marking may cause a deadlock while flushing a non-WQ MEM RECLAIM workqueue, resulting in a warning. The problem occurs when the storvsc remove lun function is called, leading to a potential deadlock.

Recommendations For Linux kernel versions prior to 5.4.0-1086-azure #91~18.04.1-Ubuntu, update to a newer version that includes the fix for this issue. As a temporary workaround, consider disabling the storvsc error wq workqueue to prevent the deadlock. However, this may have unintended consequences and should be done with caution. At the moment, there is no information about other specific mitigation measures.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-833

CWE-667

Related Identifiers

BDU:2026-02026

CESA-2023_2951

CVE-2022-49986

OESA-2025-1820

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:02264-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02334-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 786

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49986.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49942 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50103 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50098 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49986 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50022 · Security Note
• https://git.kernel.org/stable/c/b4c928ace9a123629eeb14ec5d7ee8f73e5ac668 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49948 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49989 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50185 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53109 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49918 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49986 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50134 · Security Note