cbcvebase.
CVE-2022-49434
published 2025-02-26

CVE-2022-49434: In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() The sysfs…

PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
12.0th percentile
In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() The sysfs sriov_numvfs_store() path acquires the device lock before the config space access lock: sriov_numvfs_store device_lock # A (1) acquire device lock sriov_configure vfio_pci_sriov_configure # (for example) vfio_pci_core_sriov_configure pci_disable_sriov sriov_disable pci_cfg_access_lock pci_wait_cfg # B (4) wait for dev->block_cfg_access == 0 Previously, pci_dev_lock() acquired the config space access lock before the device lock: pci_dev_lock pci_cfg_access_lock dev->block_cfg_access = 1 # B (2) set dev->block_cfg_access = 1 device_lock # A (3) wait for device lock Any path that uses pci_dev_lock(), e.g., pci_reset_function(), may deadlock with sriov_numvfs_store() if the operations occur in the sequence (1) (2) (3) (4). Avoid the deadlock by reversing the order in pci_dev_lock() so it acquires the device lock before the config space access lock, the same as the sriov_numvfs_store() path. [bhelgaas: combined and adapted commit log from Jay Zhou's independent subsequent posting: https://lore.kernel.org/r/[email protected]]

Affected

22 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.5-1 (bookworm)linux 5.18.5-1 (bookworm)
linuxlinux——
linuxlinux>= 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e < c3c6dc1853b8bf3c718f96fd8480a6eb09ba4831c3c6dc1853b8bf3c718f96fd8480a6eb09ba4831
linuxlinux>= 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e < aed6d4d519210c28817948f34c53b6e058e0456caed6d4d519210c28817948f34c53b6e058e0456c
linuxlinux>= 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e < c9a81f9ed6ae3554621d6a50220b1bc74b67d81ec9a81f9ed6ae3554621d6a50220b1bc74b67d81e
linuxlinux>= 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e < eff3587b9c01439b738298475e555c028ac9f55eeff3587b9c01439b738298475e555c028ac9f55e
linuxlinux>= 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e < 2cdd5284035322795b0964f899eefba254cfe4832cdd5284035322795b0964f899eefba254cfe483
linuxlinux>= 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e < ea047f51172aa68841adef7f52d375002438b8f0ea047f51172aa68841adef7f52d375002438b8f0
linuxlinux>= 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e < 59ea6b3ae51df7cd6bfd84c9c0030609b931562259ea6b3ae51df7cd6bfd84c9c0030609b9315622
linuxlinux>= 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e < a91ee0e9fca9d7501286cfbced9b30a33e52740aa91ee0e9fca9d7501286cfbced9b30a33e52740a
linuxlinux_kernel< 4.9.3184.9.318
linuxlinux_kernel>= 0 < 5.10.127-15.10.127-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 4.10 < 4.14.2834.14.283
linuxlinux_kernel>= 4.15 < 4.19.2474.19.247
linuxlinux_kernel>= 4.20 < 5.4.1985.4.198
linuxlinux_kernel>= 5.11 < 5.15.465.15.46
linuxlinux_kernel>= 5.16 < 5.17.145.17.14
linuxlinux_kernel>= 5.18 < 5.18.35.18.3
linuxlinux_kernel>= 5.5 < 5.10.1215.10.121

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.