Deadlock Vulnerability in Linux Kernel's RTL8192BS Driver
Summary
CVE-2022-49311: In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle() There is a deadlock in rtw_joinbss_event_prehandle(), which is shown below: (... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. The RTL8192BS driver is a staging driver within the kernel that supports specific wireless network adapters. This driver is crucial for enabling wireless connectivity, but it has been found to contain a deadlock vulnerability that can lead to system hangs.
Vulnerability Detail
In the Linux kernel, specifically within the RTL8192BS driver, a deadlock occurs in the rtw_joinbss_event_prehandle() function. This deadlock arises when two threads attempt to acquire the same lock in a conflicting order, leading to a situation where both threads are waiting indefinitely for each other to release the lock. This can result in a complete system stall, affecting the stability and reliability of the operating system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is advisable to apply the patch as soon as it becomes available to prevent potential deadlock situations.
Conclusion
The deadlock vulnerability in the Linux kernel's RTL8192BS driver poses a significant risk to system stability. It is essential for users to update their systems to the patched version to avoid potential deadlocks and ensure reliable operation. Regular monitoring of vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
A deadlock is a situation in computing where two or more processes are unable to proceed because each is waiting for the other to release a resource.
This vulnerability can lead to system hangs, making your operating system unresponsive and potentially causing data loss.
If you are using Debian 11, 12, or 13 with the affected Linux kernel versions prior to 5.18.5-1, your system is vulnerable.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
