PT-2025-8243 · Linux+3 · Linux Kernel+3

Duoming Zhou

·

Published

2022-01-01

·

Updated

2026-02-13

·

CVE-2022-49309

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A deadlock issue has been identified in the Linux kernel, specifically in the rtw surveydone event callback() function within the rtl8723bs driver. This occurs due to a lock being held by one thread while waiting for a timer to stop, and the timer handler in another thread also requiring the same lock. The deadlock happens because the function holds the pmlmepriv->lock while using del timer sync() to wait for the timer to stop, but the timer handler also needs this lock, causing the function to block indefinitely.
Recommendations To resolve this issue, apply the patch that extracts del timer sync() from the protection of spin lock bh(), allowing the timer handler to obtain the necessary lock. Additionally, replace spin lock bh() with spin lock irq() in the rtw scan timeout handler() function to prevent further deadlocks.

Exploit

Fix

Improper Locking

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2022-49309
DLA-4178-1
OESA-2026-1341
SUSE-SU-2025:1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1027-1
SUSE-SU-2025_1241-1

Affected Products

Astra Linux
Debian
Linux Kernel
Suse