PT-2025-8380

CVE-2022-49446

·

Published

2025-02-26

·

Updated

2026-10-19

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A deadlock scenario has been identified in the Linux kernel related to nvdimm (non-volatile dual in-line memory module) firmware activation. The issue arises from the locking mechanism used to protect against unregistration and simultaneous operations. Specifically, the nvdimm bus lock() is held over hibernate quiet exec(), which walks the system device topology and takes device lock() along the way. This can lead to a deadlock scenario involving the system transition mutex and reconfig mutex. Another deadlock scenario involves the acpi scan lock and cxl root key. The issue stems from redundant lock usage, which can be deleted to prevent the deadlock.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
CLSA-2026-1780516677
OPENSUSE-SU-2025_1263-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1194-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1241-1
SUSE-SU-2025:1263-1
SUSE-SU-2025_1263-1
Found an issue in the description? Have something to add? Feel free to write us 👾