PT-2025-8200 · Linux+4 · Linux Kernel+4
Published
2022-11-08
·
Updated
2026-02-04
·
CVE-2022-49272
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A potential deadlock issue was identified in the Linux kernel, specifically in the ALSA pcm component, between the
buffer mutex and mmap lock. This issue could occur due to concurrent access via both ALSA and OSS APIs, potentially leading to an AB/BA deadlock. The problem arises when the OSS mmap operation is performed, allowing re-configuration of parameters while holding the mm->mmap mutex, and simultaneously, read/write operations take the mm->mmap lock internally. A similar issue was previously addressed using a refcount. The current patch resolves this by replacing the buffer mutex lock in read/write operations with a refcount, tracking concurrent access via the runtime->buffer accessing field.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Centos
Linux Kernel
Red Hat
Suse