Deadlock and Link Starvation Vulnerability in Linux Kernel's n_gsm Package
Summary
CVE-2022-50116: In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix deadlock and link starvation in outgoing data path The current implementation queues up new control and user packets as needed and proce... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management and system resources. The n_gsm package is responsible for handling GSM (Global System for Mobile Communications) data link protocols. This package is crucial for ensuring reliable communication over mobile networks. However, it has been identified that the current implementation can lead to deadlocks and link starvation, particularly under high transmission loads, affecting the performance and reliability of data transmission.
Vulnerability Detail
The vulnerability arises from the tight coupling between control and user packet processing within the n_gsm implementation. When the line discipline (ldisc) experiences congestion, new control and user packets are queued and processed in the same code path, leading to potential deadlocks. This situation can cause significant delays and even timeouts in data transmission, especially during high load scenarios. The vulnerability is characterized by spinlock recursion, which can lead to system instability and degraded performance.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workaround has been provided for this vulnerability. However, users are advised to monitor their systems for unusual behavior during high transmission loads and consider temporarily reducing the load on the n_gsm package until the patch is applied.
Conclusion
The deadlock and link starvation vulnerability in the Linux kernel's n_gsm package poses significant risks to system performance and reliability, particularly under high data transmission loads. Users are strongly encouraged to update their systems to the latest patched versions to mitigate these risks. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The n_gsm package in the Linux kernel is responsible for managing GSM data link protocols, facilitating communication over mobile networks.
Symptoms may include significant delays in data transmission, timeouts, and potential system instability during high load scenarios.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Yes, a patch is available in the form of updated kernel versions. Users should upgrade to at least version 6.0.2-1 for Debian 12 and 13.
While there is no specific workaround, it is advisable to monitor system performance and reduce the load on the n_gsm package until the patch can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
