PT-2025-8237 · Linux+1 · Linux Kernel+1

Duoming Zhou · Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49303

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock issue has been identified in the Linux kernel, specifically in the rtw joinbss event prehandle() function. This occurs when two threads attempt to access the same lock, pmlmepriv->lock, resulting in a blockage. The issue arises from the use of del timer sync() within the protection of spin lock bh(), which prevents the timer handler from obtaining the necessary lock. To resolve this, the del timer sync() call has been extracted from the spin lock bh() protection, and spin lock bh() has been replaced with spin lock irq() in the rtw join timeout handler() function to prevent the deadlock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-833

CWE-667

Related Identifiers

AZL-60303

BDU:2026-04901

CVE-2022-49303

Affected Products

Debian

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49303.json · Exploit
• https://ubuntu.com/security/CVE-2022-49303 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49303 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-60303 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49303 · Security Note
• https://git.kernel.org/stable/c/25cf414b0610fea29d8e045f315648d9007c9a46 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49303 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04901 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49303 · Vendor Advisory
• https://git.kernel.org/stable/c/0fcddf9c7c10202946d5b19409efbdff744fba88 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49303 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49303 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49303 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49303 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note