PT-2025-8261 · Linux+2 · Linux Kernel+2

Nikhil Kshirsagar · Published 2022-05-24 · Updated 2025-04-15 · CVE-2022-49327

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A journal no-space deadlock issue was found in the Linux kernel, specifically in the bcache module. This deadlock can occur when all journal buckets are fully filled by active jset with heavy write I/O load during cache set registration after a reboot. The issue arises when a journaled bkey is inserted into a btree node, resulting in a btree node split, and a new journal request is triggered, but there is no space in the journal buckets. To resolve this issue, a patch was applied to reserve 1 journal bucket in runtime, allowing only the reserved journal bucket to be used during cache set registration procedures like journal replay. This ensures that the journal space will never be fully filled, preventing the journal no-space deadlock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

BDU:2026-02605

CVE-2022-49327

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1348

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49327.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6332ea3e35efa12dc08f0cbf5faea5e6e8eb0497 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49327 · Vendor Advisory
• https://git.kernel.org/stable/c/1dda32aed6f62c163f38ff947ef5b3360e329159 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49327 · Security Note
• https://git.kernel.org/stable/c/32feee36c30ea06e38ccb8ae6e5c44c6eec790a6 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49327 · Vendor Advisory
• https://git.kernel.org/stable/c/5607652823ac65e2c6885e73bd46d5a4f9a20363 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49327 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/59afd4f287900c8187e968a4153ed35e6b48efce · Patch