CVE - CVE-2022-49434

CVE-ID
CVE-2022-49434	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() The sysfs sriov_numvfs_store() path acquires the device lock before the config space access lock: sriov_numvfs_store device_lock # A (1) acquire device lock sriov_configure vfio_pci_sriov_configure # (for example) vfio_pci_core_sriov_configure pci_disable_sriov sriov_disable pci_cfg_access_lock pci_wait_cfg # B (4) wait for dev->block_cfg_access == 0 Previously, pci_dev_lock() acquired the config space access lock before the device lock: pci_dev_lock pci_cfg_access_lock dev->block_cfg_access = 1 # B (2) set dev->block_cfg_access = 1 device_lock # A (3) wait for device lock Any path that uses pci_dev_lock(), e.g., pci_reset_function(), may deadlock with sriov_numvfs_store() if the operations occur in the sequence (1) (2) (3) (4). Avoid the deadlock by reversing the order in pci_dev_lock() so it acquires the device lock before the config space access lock, the same as the sriov_numvfs_store() path. [bhelgaas: combined and adapted commit log from Jay Zhou's independent subsequent posting: https://lore.kernel.org/r/20220404062539.1710-1-jianjay.zhou@huawei.com]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2cdd5284035322795b0964f899eefba254cfe483 URL:https://git.kernel.org/stable/c/2cdd5284035322795b0964f899eefba254cfe483 MISC:https://git.kernel.org/stable/c/59ea6b3ae51df7cd6bfd84c9c0030609b9315622 URL:https://git.kernel.org/stable/c/59ea6b3ae51df7cd6bfd84c9c0030609b9315622 MISC:https://git.kernel.org/stable/c/a91ee0e9fca9d7501286cfbced9b30a33e52740a URL:https://git.kernel.org/stable/c/a91ee0e9fca9d7501286cfbced9b30a33e52740a MISC:https://git.kernel.org/stable/c/aed6d4d519210c28817948f34c53b6e058e0456c URL:https://git.kernel.org/stable/c/aed6d4d519210c28817948f34c53b6e058e0456c MISC:https://git.kernel.org/stable/c/c3c6dc1853b8bf3c718f96fd8480a6eb09ba4831 URL:https://git.kernel.org/stable/c/c3c6dc1853b8bf3c718f96fd8480a6eb09ba4831 MISC:https://git.kernel.org/stable/c/c9a81f9ed6ae3554621d6a50220b1bc74b67d81e URL:https://git.kernel.org/stable/c/c9a81f9ed6ae3554621d6a50220b1bc74b67d81e MISC:https://git.kernel.org/stable/c/da9792920ab525b8a932aa9aeee34529ad7b83f7 URL:https://git.kernel.org/stable/c/da9792920ab525b8a932aa9aeee34529ad7b83f7 MISC:https://git.kernel.org/stable/c/ea047f51172aa68841adef7f52d375002438b8f0 URL:https://git.kernel.org/stable/c/ea047f51172aa68841adef7f52d375002438b8f0 MISC:https://git.kernel.org/stable/c/eff3587b9c01439b738298475e555c028ac9f55e URL:https://git.kernel.org/stable/c/eff3587b9c01439b738298475e555c028ac9f55e
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)