PT-2025-8245 · Linux+3 · Linux Kernel+3
Duoming Zhou
·
Published
2022-01-01
·
Updated
2026-03-14
·
CVE-2022-49311
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A deadlock issue has been identified in the Linux kernel, specifically in the
rtw joinbss event prehandle() function. This occurs due to a lock being held by one thread while another thread attempts to acquire the same lock, resulting in a deadlock. The issue arises from the use of del timer sync() within the protection of spin lock bh(), which prevents the timer handler from obtaining the necessary lock. To resolve this, the del timer sync() call has been extracted from the lock protection, and spin lock bh() has been replaced with spin lock irq() in the rtw join timeout handler() function to prevent the deadlock.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linux Kernel
Suse