PT-2025-8635 · Linux+1 · Linux Kernel+1

Filipe Manana · Published 2022-06-06 · Updated 2025-02-27 · CVE-2022-49702

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock can occur in the Linux kernel when an unmount operation is initiated while an async block group reclaim task is running and relocating a data block group. This happens because of a combination of factors, including the presence of an async metadata or data space reclaim task and the parking of the cleaner kthread during the close ctree() operation. The issue arises when the async space reclaim task runs all existing delayed iputs and the block group reclaim task creates a delayed iput, leading to a deadlock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-833

CWE-667

Related Identifiers

BDU:2026-03995

CVE-2022-49702

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49702.json · Exploit
• https://git.kernel.org/stable/c/9fadb11f1295289e0da4d3342ecb6b92c1c99540 · Patch
• https://osv.dev/vulnerability/CVE-2022-49702 · Vendor Advisory
• https://git.kernel.org/stable/c/341d33128a940c6634175dcb6ca92dc454cfa7d2 · Patch
• https://bdu.fstec.ru/vul/2026-03995 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49702 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49702 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49702 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49702 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49702 · Vendor Advisory
• https://git.kernel.org/stable/c/31e70e527806c546a72262f2fc3d982ee23c42d3 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49702 · Vendor Advisory
• https://twitter.com/CVEnew/status/1894592815771881790 · Twitter Post
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.8 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note