CVE-2022-50149

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential deadlock issue has been identified in the Linux kernel, specifically in the driver attach function. This issue arises when asynchronous probing is allowed, and due to out-of-memory or work limit conditions, synchronous execution is performed instead, leading to an A-A deadlock because driver attach async helper attempts to acquire the dev lock. The deadlock can be reproduced by making the condition if (!entry || atomic read(&entry count) > MAX WORK) untenable.

Recommendations To fix the deadlock, move the async schedule dev call outside the device lock, as the system unbound wq parameter in async schedule node domain can accept concurrent operations without changing the code logic or leading to a deadlock.

Note: Since the affected versions are not explicitly specified, the recommendation applies generally to the Linux kernel.