CVE-2022-50833 — Race Condition in Linux
Severity
6.6MEDIUM
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works
syzbot is reporting attempt to schedule hdev->cmd_work work from system_wq
WQ into hdev->workqueue WQ which is under draining operation [1], for
commit c8efcc2589464ac7 ("workqueue: allow chained queueing during
destruction") does not allow such operation.
The check introduced by commit 877afadad2dce8aa ("Bluetooth: When HCI work
queue is drained, only q…
Affected Packages4 packages
▶CVEListV5linux/linux3b382555706558f5c0587862b6dc03e96a252bba — c4635cf3d845a7324c25c52d549b70c8bd7ad4c7+4
🔴Vulnerability Details
3GHSA▶
GHSA-rxjc-h4m5-gvq8: In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works
syzbot↗2025-12-30
OSV▶
CVE-2022-50833: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works syzbot is↗2025-12-30