CVE-2022-49309— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 12
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | fb127a61c9d8dfd9b370ee173344d01711f3c698< c84e5c819600ee0628f61b33d145258ae0f3d7a7 | affected |
fb127a61c9d8dfd9b370ee173344d01711f3c698< f89f6c3ebf69623b8ea48200bd690e9e210335a1 | affected | ||
fb127a61c9d8dfd9b370ee173344d01711f3c698< ce129d3efd181da5fd56f4360cc8827122afa67e | affected | ||
fb127a61c9d8dfd9b370ee173344d01711f3c698< 2c41f5c341853f84b7bc2f32605d4e2782e8c279 | affected | ||
fb127a61c9d8dfd9b370ee173344d01711f3c698< cc7ad0d77b51c872d629bcd98aea463a3c4109e7 | affected | ||
5.10 | affected | ||
< 5.10 | unaffected | ||
5.10.237≤ 5.10.* | unaffected | ||
| … +4 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2022-49309の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() There is a deadlock in rtw_surveydone_event_callback(), which is shown below: (Thread 1) | (Thread 2) | _set_timer() rtw_surveydone_event_callback()| mod_timer() spin_lock_bh() //(1) | (wait a time) ... | rtw_scan_timeout_handler() del_timer_sync() | spin_lock_bh() //(2) (wait timer to stop) | ... We hold pmlmepriv->lock in position (1) of thread 1 and use del_timer_sync() to wait timer to stop, but timer handler also need pmlmepriv->lock in position (2) of thread 2. As a result, rtw_surveydone_event_callback() will block forever. This patch extracts del_timer_sync() from the protection of spin_lock_bh(), which could let timer handler to obtain the needed lock. What`s more, we change spin_lock_bh() in rtw_scan_timeout_handler() to spin_lock_irq(). Otherwise, spin_lock_bh() will also cause deadlock() in timer handler.
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于staging rtl8723bs驱动中rtw_surveydone_event_callback函数存在死锁。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2022-49309の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2022-49309のインテリジェンス情報
请登录查看更多情报信息。
CVE-2022-49309 补丁与修复 (5)
Same Patch Batch · Linux · 2025-02-26 · 706 CVEs total
| CVE-2022-49149 | 9.8 CRITICAL | rxrpc: Fix call timer start racing with call destruction |
| CVE-2022-49561 | 9.8 CRITICAL | netfilter: conntrack: re-fetch conntrack after insertion |
| CVE-2022-49407 | 9.8 CRITICAL | dlm: fix plock invalid read |
| CVE-2022-49362 | 9.8 CRITICAL | NFSD: Fix potential use-after-free in nfsd_file_put() |
| CVE-2022-49280 | 9.8 CRITICAL | NFSD: prevent underflow in nfssvc_decode_writeargs() |
| CVE-2022-49356 | 9.8 CRITICAL | SUNRPC: Trap RDMA segment overflows |
| CVE-2022-49418 | 9.8 CRITICAL | NFSv4: Fix free of uninitialized nfs4_label on referral lookup. |
| CVE-2022-49094 | 9.8 CRITICAL | net/tls: fix slab-out-of-bounds bug in decrypt_internal |
| CVE-2022-49093 | 9.8 CRITICAL | skbuff: fix coalescing for page_pool fragment recycling |
| CVE-2022-49260 | 9.8 CRITICAL | crypto: hisilicon/sec - fix the aead software fallback for engine |
| CVE-2022-49194 | 9.8 CRITICAL | net: bcmgenet: Use stronger register read/writes to assure ordering |
| CVE-2022-49201 | 9.8 CRITICAL | ibmvnic: fix race between xmit and reset |
| CVE-2022-49058 | 9.1 CRITICAL | cifs: potential buffer overflow in handling symlinks |
| CVE-2022-49535 | 8.8 HIGH | scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI |
| CVE-2022-49159 | 8.8 HIGH | scsi: qla2xxx: Implement ref count for SRB |
| CVE-2022-49138 | 8.8 HIGH | Bluetooth: hci_event: Ignore multiple conn complete events |
| CVE-2022-49479 | 8.8 HIGH | mt76: fix tx status related use-after-free race on station removal |
| CVE-2022-49470 | 8.8 HIGH | Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event |
| CVE-2022-49111 | 8.8 HIGH | Bluetooth: Fix use after free in hci_send_acl |
| CVE-2022-49114 | 8.8 HIGH | scsi: libfc: Fix use after free in fc_exch_abts_resp() |
Showing 20 of 706 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
同じベンダー: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
V. CVE-2022-49309へのコメント
まだコメントはありません