CVE-2022-49313

Summary

In the Linux kernel, the following vulnerability has been resolved:

drivers: usb: host: Fix deadlock in oxu_bus_suspend()

There is a deadlock in oxu_bus_suspend(), which is shown below:

(Thread 1) | (Thread 2) | timer_action() oxu_bus_suspend() | mod_timer() spin_lock_irq() //(1) | (wait a time) … | oxu_watchdog() del_timer_sync() | spin_lock_irq() //(2) (wait timer to stop) | …

We hold oxu->lock in position (1) of thread 1, and use del_timer_sync() to wait timer to stop, but timer handler also need oxu->lock in position (2) of thread 2. As a result, oxu_bus_suspend() will block forever.

This patch extracts del_timer_sync() from the protection of spin_lock_irq(), which could let timer handler to obtain the needed lock.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxb92a78e582b1a45649143dc86e526f5824092478 < 9b58d255f27b0ed6a2e43208960864d67579db58affected
LinuxLinuxb92a78e582b1a45649143dc86e526f5824092478 < a3d380188bde8900c3f604e82b56572896499124affected
LinuxLinuxb92a78e582b1a45649143dc86e526f5824092478 < f8242044c91cafbba9e320b0fb31abf2429a3221affected
LinuxLinuxb92a78e582b1a45649143dc86e526f5824092478 < 2dcec0bc142be2096af71a5703d63237127db204affected
LinuxLinuxb92a78e582b1a45649143dc86e526f5824092478 < ffe9440d698274c6462d2e304562c6ddfc8c84dfaffected
LinuxLinuxb92a78e582b1a45649143dc86e526f5824092478 < d888753872190abd18f68a7d77b9c7c367f0a7abaffected
LinuxLinuxb92a78e582b1a45649143dc86e526f5824092478 < 4187b291a76664a3c03d3f0d9bfadc8322881868affected
LinuxLinuxb92a78e582b1a45649143dc86e526f5824092478 < b97aae8b43b718314012e8170b7e03dbfd2e7677affected
LinuxLinuxb92a78e582b1a45649143dc86e526f5824092478 < 4d378f2ae58138d4c55684e1d274e7dd94aa6524affected
LinuxLinux2.6.29affected
LinuxLinux0 < 2.6.29unaffected
LinuxLinux4.9.318 <= 4.9.*unaffected
LinuxLinux4.14.283 <= 4.14.*unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.122 <= 5.10.*unaffected
LinuxLinux5.15.47 <= 5.15.*unaffected
LinuxLinux5.17.15 <= 5.17.*unaffected
LinuxLinux5.18.4 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References