Critical Vulnerability in Linux Kernel: Invalid Wait Context in Watchdog Driver
Summary
CVE-2022-49383: In the Linux kernel, the following vulnerability has been resolved: watchdog: rzg2l_wdt: Fix 'BUG: Invalid wait context' This patch fixes the issue 'BUG: Invalid wait context' during restart() callback by using clk_prepa... Affects linux versions < 5.18.5-1. Fixed in 5.18.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. The watchdog driver, specifically for the Renesas RZG2L platform, is responsible for monitoring system health and ensuring that the system can recover from failures. This vulnerability affects the stability and reliability of systems using this driver, particularly when configured with renesas_defconfig.
Vulnerability Detail
The vulnerability, identified as CVE-2022-49383, arises from an improper handling of clock management during the restart process in the rzg2l_wdt watchdog driver. The issue manifests as a 'BUG: Invalid wait context' error, which can lead to system instability and potential crashes. This occurs when the system attempts to lock resources while in an invalid context, specifically during the execution of the restart() callback. The problem was traced back to the use of pm_runtime_get_sync() for clock management, which is not suitable in this context.
How To Fix
Minimum fixed version
5.18.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux kernel.
Conclusion
CVE-2022-49383 is a significant vulnerability in the Linux kernel's watchdog driver that can compromise system stability. Users are strongly advised to update to the patched version to ensure their systems remain secure and reliable. Utilizing tools like Vulert can help monitor for such vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49383 is a vulnerability in the Linux kernel's watchdog driver that can cause system instability due to an invalid wait context during the restart process.
This vulnerability can lead to system crashes or instability when the watchdog driver attempts to restart the system, potentially affecting system reliability.
If you are using a version of the Linux kernel prior to 5.18.5-1, particularly with the rzg2l_wdt watchdog driver, your system may be vulnerable.
You can use Vulert, which monitors open-source vulnerabilities in your software by analyzing your manifest file. Visit Vulert Scanner to check for vulnerabilities without needing to sign up.
While there are no specific workarounds, it is crucial to plan for an update to the patched version as soon as possible to mitigate risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
