Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-49434

PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()

Medium5.5EPSS 0.21%
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() The sysfs sriov_numvfs_store() path acquires the device lock before the config space access lock: sriov_numvfs_store device_lock # A (1) acquire device lock sriov_configure vfio_pci_sriov_configure # (for example) vfio_pci_core_sriov_configure pci_disable_sriov sriov_disable pci_cfg_access_lock pci_wait_cfg # B (4) wait for dev->block_cfg_access == 0 Previously, pci_dev_lock() acquired the config space access lock before the device lock: pci_dev_lock pci_cfg_access_lock dev->block_cfg_access = 1 # B (2) set dev->block_cfg_access = 1 device_lock # A (3) wait for device lock Any path that uses pci_dev_lock(), e.g., pci_reset_function(), may deadlock with sriov_numvfs_store() if the operations occur in the sequence (1) (2) (3) (4). Avoid the deadlock by reversing the order in pci_dev_lock() so it acquires the device lock before the config space access lock, the same as the sriov_numvfs_store() path. [bhelgaas: combined and adapted commit log from Jay Zhou's independent subsequent posting: https://lore.kernel.org/r/[email protected]]

Timeline

  1. ID reserved

    By Linux

  2. Published

  3. · 15 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-49434, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.21% · top 88% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

Affected products

  • Linux · Linux

    • affected 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e – < c3c6dc1853b8bf3c718f96fd8480a6eb09ba4831
    • affected 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e – < aed6d4d519210c28817948f34c53b6e058e0456c
    • affected 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e – < c9a81f9ed6ae3554621d6a50220b1bc74b67d81e
    • affected 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e – < eff3587b9c01439b738298475e555c028ac9f55e
    • affected 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e – < 2cdd5284035322795b0964f899eefba254cfe483
    • affected 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e – < ea047f51172aa68841adef7f52d375002438b8f0
    • affected 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e – < 59ea6b3ae51df7cd6bfd84c9c0030609b9315622
    • affected 17530e71e0166a37f8e20a9b7bcf1d50ae3cff8e – < a91ee0e9fca9d7501286cfbced9b30a33e52740a

  • Linux · Linux

    • affected 4.13
    • unaffected < 4.13
    • unaffected 4.14.283 – ≤ 4.14.*
    • unaffected 4.19.247 – ≤ 4.19.*
    • unaffected 5.4.198 – ≤ 5.4.*
    • unaffected 5.10.121 – ≤ 5.10.*
    • unaffected 5.15.46 – ≤ 5.15.*
    • unaffected 5.17.14 – ≤ 5.17.*
    • unaffected 5.18.3 – ≤ 5.18.*
    • unaffected 5.19 – ≤ *

References (8)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-49434 badge
[![CVE-2022-49434](https://trackcve.app/badge/CVE-2022-49434.svg)](https://trackcve.app/cve/CVE-2022-49434)

Record last updated .