CVE-2022-49315

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49315
In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() There is a deadlock in rtllib_beacons_stop(), which is shown below: (Thread 1) | (Thread 2) | rtllib_send_beacon() rtllib_beacons_stop() | mod_timer() spin_lock_irqsave() //(1) | (wait a time) ... | rtllib_send_beacon_cb() del_timer_sync() | spin_lock_irqsave() //(2) (wait timer to stop) | ... We hold ieee->beacon_lock in position (1) of thread 1 and use del_timer_sync() to wait timer to stop, but timer handler also need ieee->beacon_lock in position (2) of thread 2. As a result, rtllib_beacons_stop() will block forever. This patch extracts del_timer_sync() from the protection of spin_lock_irqsave(), which could let timer handler to obtain the needed lock.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/08bacf871c019163ccd1389d0bc957a43324967a Patch
https://git.kernel.org/stable/c/0f69d7d5e918aa43423d86bd17ddb11b1b5e8ada Patch
https://git.kernel.org/stable/c/381045dc64d23a2229c47c5524c06bfc33d34446 Patch
https://git.kernel.org/stable/c/4681129fda9e8555392eaaadb239ec6a6e2b3e12 Patch
https://git.kernel.org/stable/c/46c861009bf437a18417df24cea0d181741b7d72 Patch
https://git.kernel.org/stable/c/64b05fa212c7e4d057676e8b7e7120c6eb2f615b Patch
https://git.kernel.org/stable/c/9b6bdbd9337de3917945847bde262a34a87a6303 Patch
https://git.kernel.org/stable/c/fef451f0fbbe85dbd2962b18379d02e2965610db Patch
https://git.kernel.org/stable/c/ffd4c4d5293e4985092ea45ba21cad9326e2e434 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 Mar 2025, 22:00

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/08bacf871c019163ccd1389d0bc957a43324967a - () https://git.kernel.org/stable/c/08bacf871c019163ccd1389d0bc957a43324967a - Patch
References () https://git.kernel.org/stable/c/0f69d7d5e918aa43423d86bd17ddb11b1b5e8ada - () https://git.kernel.org/stable/c/0f69d7d5e918aa43423d86bd17ddb11b1b5e8ada - Patch
References () https://git.kernel.org/stable/c/381045dc64d23a2229c47c5524c06bfc33d34446 - () https://git.kernel.org/stable/c/381045dc64d23a2229c47c5524c06bfc33d34446 - Patch
References () https://git.kernel.org/stable/c/4681129fda9e8555392eaaadb239ec6a6e2b3e12 - () https://git.kernel.org/stable/c/4681129fda9e8555392eaaadb239ec6a6e2b3e12 - Patch
References () https://git.kernel.org/stable/c/46c861009bf437a18417df24cea0d181741b7d72 - () https://git.kernel.org/stable/c/46c861009bf437a18417df24cea0d181741b7d72 - Patch
References () https://git.kernel.org/stable/c/64b05fa212c7e4d057676e8b7e7120c6eb2f615b - () https://git.kernel.org/stable/c/64b05fa212c7e4d057676e8b7e7120c6eb2f615b - Patch
References () https://git.kernel.org/stable/c/9b6bdbd9337de3917945847bde262a34a87a6303 - () https://git.kernel.org/stable/c/9b6bdbd9337de3917945847bde262a34a87a6303 - Patch
References () https://git.kernel.org/stable/c/fef451f0fbbe85dbd2962b18379d02e2965610db - () https://git.kernel.org/stable/c/fef451f0fbbe85dbd2962b18379d02e2965610db - Patch
References () https://git.kernel.org/stable/c/ffd4c4d5293e4985092ea45ba21cad9326e2e434 - () https://git.kernel.org/stable/c/ffd4c4d5293e4985092ea45ba21cad9326e2e434 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drivers: staging: rtl8192e: Corregir bloqueo en rtllib_beacons_stop() Hay un bloqueo en rtllib_beacons_stop(), que se muestra a continuación: (Hilo 1) | (Hilo 2) | rtllib_send_beacon() rtllib_beacons_stop() | mod_timer() spin_lock_irqsave() //(1) | (esperar un tiempo) ... | rtllib_send_beacon_cb() del_timer_sync() | spin_lock_irqsave() //(2) (esperar que el temporizador se detenga) | ... Mantenemos ieee->beacon_lock en la posición (1) del hilo 1 y usamos del_timer_sync() para esperar a que el temporizador se detenga, pero el controlador del temporizador también necesita ieee->beacon_lock en la posición (2) del hilo 2. Como resultado, rtllib_beacons_stop() se bloqueará para siempre. Este parche extrae del_timer_sync() de la protección de spin_lock_irqsave(), lo que podría permitir que el controlador del temporizador obtenga el bloqueo necesario.
CWE CWE-667
First Time Linux linux Kernel
Linux

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-13 22:00

NVD link : CVE-2022-49315

Mitre link : CVE-2022-49315

CVE.ORG link : CVE-2022-49315

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking