CVE-2022-49309

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock occurs in the rtw surveydone event callback() function. The issue arises when the system holds the pmlmepriv->lock and calls del timer sync() to wait for a timer to stop, while the timer handler rtw scan timeout handler() simultaneously attempts to acquire the same pmlmepriv->lock. This circular dependency causes the rtw surveydone event callback() function to block indefinitely. To resolve this, del timer sync() must be moved outside the protection of spin lock bh(), and the spin lock bh() call within rtw scan timeout handler() should be replaced with spin lock irq() to prevent further deadlocks in the timer handler.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.