PT-2025-8540 · Linux+2 · Linux Kernel+2

Yang Jihong

·

Published

2025-02-26

·

Updated

2025-04-16

·

CVE-2022-49607

CVSS v3.1

4.7

Medium

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A data race has been identified between perf event set output() and perf mmap close() in the Linux kernel. This issue occurs when there is a concurrent execution of these two functions, leading to a potential deadlock situation. The problem arises because the loop in perf mmap close() holds the e2->mmap mutex lock, while the attach in perf event set output() holds the e1->mmap mutex lock, resulting in no serialization to avoid this race. This can cause a subsequent perf mmap() call to loop forever.
Recommendations To alleviate this problem, it is recommended to modify the perf event set output() function to take both e1->mmap mutex and e2->mmap mutex locks. Additionally, the loop in perf mmap() should be modified to detach the rb directly, avoiding the need to wait for the concurrent perf mmap close() to complete. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2022-49607
SUSE-SU-2025:1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1241-1
SUSE-SU-2025:1293-1
SUSE-SU-2025_1027-1
SUSE-SU-2025_1241-1
SUSE-SU-2025_1293-1

Affected Products

Astra Linux
Linux Kernel
Suse