CVE-2022-49315

Summary

CVE-2022-49315 is a deadlock vulnerability affecting the Linux kernel's rtl8192e driver. In rtllib_beacons_stop(), a deadlock occurs due to a contention between two threads for the ieee->beacon_lock. Thread 1 holds the lock while waiting for a timer to stop using del_timer_sync(). However, thread 2 also requires the lock to handle the timer handler. As a result, rtllib_beacons_stop() becomes stuck in an infinite loop. The patch for this issue extracts del_timer_sync() from the spin_lock_irqsave() protection to enable the timer handler to acquire the lock, resolving the deadlock.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.