CVE-2022-49304

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49304
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49304.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49304
Downstream
Related
Published
2025-02-26T02:10:37.726Z
Modified
2026-04-11T12:43:51.482662Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
drivers: tty: serial: Fix deadlock in sa1100_set_termios()
Details

In the Linux kernel, the following vulnerability has been resolved:

drivers: tty: serial: Fix deadlock in sa1100settermios()

There is a deadlock in sa1100settermios(), which is shown below:

(Thread 1) | (Thread 2) | sa1100enablems() sa1100settermios() | modtimer() spinlockirqsave() //(1) | (wait a time) ... | sa1100timeout() deltimersync() | spinlockirqsave() //(2) (wait timer to stop) | ...

We hold sport->port.lock in position (1) of thread 1 and use deltimersync() to wait timer to stop, but timer handler also need sport->port.lock in position (2) of thread 2. As a result, sa1100settermios() will block forever.

This patch moves deltimersync() before spinlockirqsave() in order to prevent the deadlock.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49304.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Fixed
0976808d0d171ec837d4bd3e9f4ad4a00ab703b8
Fixed
85e20f8bd31a46d8c60103d0274a8ebe8f47f2b2
Fixed
920f0ae7a129ffee98a106e3bbdfd61a2a59e939
Fixed
09a5958a2452ad22d0cb638711ef34ea1863a829
Fixed
6e2273eefab54a521d9c59efb6e1114e742bdf41
Fixed
2cbfc38df580bff5b2fe19f21c1a7520efcc4b3b
Fixed
553213432ef0c295becdc08c0207d2094468f673
Fixed
34d91e555e5582cffdbcbb75517bc9217866823e
Fixed
62b2caef400c1738b6d22f636c628d9f85cd4c4c

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49304.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.12
Fixed
4.9.318
Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
4.14.283
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.247
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.198
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.122
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.47
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.17.15
Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
5.18.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49304.json"