PT-2025-8340 · Linux+2 · Linux Kernel+2

Damien Le Moal · Published 2025-02-26 · Updated 2025-04-14 · CVE-2022-49406

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential deadlock situation has been identified in the Linux kernel, specifically in the blk ia range sysfs show() function. This issue arises when the queue sysfs lock is used while reading the value of a range attribute, creating a possible deadlock scenario with disk removal. The problem is signaled by lockdep with a splat when the device is removed.

Recommendations Remove the mutex lock() and mutex unlock() calls from the blk ia range sysfs show() function to resolve the potential deadlock situation.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2022-49406

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1299

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49406.json · Exploit
• https://git.kernel.org/stable/c/41e46b3c2aa24f755b2ae9ec4ce931ba5f0d8532 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49406 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49406 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49406 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49406 · Vendor Advisory
• https://git.kernel.org/stable/c/dc107c805cde709866b59867ef72b9390199205e · Patch
• https://ubuntu.com/security/CVE-2022-49406 · Vendor Advisory
• https://git.kernel.org/stable/c/717b078bc745ba9a262abebed9806a17e8bbb77b · Patch
• https://cve.org/CVERecord?id=CVE-2022-49406 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49406 · Vendor Advisory
• https://suse.com/security/cve/CVE-2022-49379 · Note
• https://suse.com/security/cve/CVE-2022-49467 · Note