PT-2025-8249 · Linux+2 · Linux Kernel+2

Duoming Zhou · Published 2022-04-20 · Updated 2025-04-15 · CVE-2022-49315

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock issue exists in the Linux kernel, specifically in the rtllib beacons stop() function. This occurs when two threads attempt to access the ieee->beacon lock simultaneously, causing one thread to block indefinitely. The issue arises from the use of del timer sync() within the protection of spin lock irqsave(), which prevents the timer handler from obtaining the necessary lock.

Recommendations For the affected Linux kernel version, apply the patch that extracts del timer sync() from the protection of spin lock irqsave() to resolve the deadlock issue in rtllib beacons stop().

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

BDU:2026-02650

CVE-2022-49315

OESA-2025-1317

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1384

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49315.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://git.kernel.org/stable/c/4681129fda9e8555392eaaadb239ec6a6e2b3e12 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49315 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49581 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49608 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49155 · Security Note
• https://git.kernel.org/stable/c/0f69d7d5e918aa43423d86bd17ddb11b1b5e8ada · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49315 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49532 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/381045dc64d23a2229c47c5524c06bfc33d34446 · Patch
• https://git.kernel.org/stable/c/08bacf871c019163ccd1389d0bc957a43324967a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49725 · Security Note
• https://git.kernel.org/stable/c/fef451f0fbbe85dbd2962b18379d02e2965610db · Patch