cbcvebase.
CVE-2022-49304
published 2025-02-26

CVE-2022-49304: In the Linux kernel, the following vulnerability has been resolved: drivers: tty: serial: Fix deadlock in sa1100_set_termios() There is a deadlock in…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.20%
9.9th percentile
In the Linux kernel, the following vulnerability has been resolved: drivers: tty: serial: Fix deadlock in sa1100_set_termios() There is a deadlock in sa1100_set_termios(), which is shown below: (Thread 1) | (Thread 2) | sa1100_enable_ms() sa1100_set_termios() | mod_timer() spin_lock_irqsave() //(1) | (wait a time) ... | sa1100_timeout() del_timer_sync() | spin_lock_irqsave() //(2) (wait timer to stop) | ... We hold sport->port.lock in position (1) of thread 1 and use del_timer_sync() to wait timer to stop, but timer handler also need sport->port.lock in position (2) of thread 2. As a result, sa1100_set_termios() will block forever. This patch moves del_timer_sync() before spin_lock_irqsave() in order to prevent the deadlock.

Affected

23 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.5-1 (bookworm)linux 5.18.5-1 (bookworm)
linuxlinux——
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 0976808d0d171ec837d4bd3e9f4ad4a00ab703b80976808d0d171ec837d4bd3e9f4ad4a00ab703b8
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 85e20f8bd31a46d8c60103d0274a8ebe8f47f2b285e20f8bd31a46d8c60103d0274a8ebe8f47f2b2
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 920f0ae7a129ffee98a106e3bbdfd61a2a59e939920f0ae7a129ffee98a106e3bbdfd61a2a59e939
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 09a5958a2452ad22d0cb638711ef34ea1863a82909a5958a2452ad22d0cb638711ef34ea1863a829
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6e2273eefab54a521d9c59efb6e1114e742bdf416e2273eefab54a521d9c59efb6e1114e742bdf41
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2cbfc38df580bff5b2fe19f21c1a7520efcc4b3b2cbfc38df580bff5b2fe19f21c1a7520efcc4b3b
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 553213432ef0c295becdc08c0207d2094468f673553213432ef0c295becdc08c0207d2094468f673
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 34d91e555e5582cffdbcbb75517bc9217866823e34d91e555e5582cffdbcbb75517bc9217866823e
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 62b2caef400c1738b6d22f636c628d9f85cd4c4c62b2caef400c1738b6d22f636c628d9f85cd4c4c
linuxlinux_kernel< 4.9.3184.9.318
linuxlinux_kernel>= 0 < 5.10.127-15.10.127-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 4.10 < 4.14.2834.14.283
linuxlinux_kernel>= 4.15 < 4.19.2474.19.247
linuxlinux_kernel>= 4.20 < 5.4.1985.4.198
linuxlinux_kernel>= 5.11 < 5.15.475.15.47
linuxlinux_kernel>= 5.16 < 5.17.155.17.15
linuxlinux_kernel>= 5.18 < 5.18.45.18.4
linuxlinux_kernel>= 5.5 < 5.10.1225.10.122

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.