{"id":"DEBIAN-CVE-2022-48931","details":"In the Linux kernel, the following vulnerability has been resolved:  configfs: fix a race in configfs_{,un}register_subsystem()  When configfs_register_subsystem() or configfs_unregister_subsystem() is executing link_group() or unlink_group(), it is possible that two processes add or delete list concurrently. Some unfortunate interleavings of them can cause kernel panic.  One of cases is: A --\u003e B --\u003e C --\u003e D A \u003c-- B \u003c-- C \u003c-- D       delete list_head *B        |      delete list_head *C --------------------------------|----------------------------------- configfs_unregister_subsystem   |   configfs_unregister_subsystem   unlink_group                  |     unlink_group     unlink_obj                  |       unlink_obj       list_del_init             |         list_del_init         __list_del_entry        |           __list_del_entry           __list_del            |             __list_del             // next == C        |             next-\u003eprev = prev   |                                 |               next-\u003eprev = prev             prev-\u003enext = next   |                                 |                 // prev == B                                 |                 prev-\u003enext = next  Fix this by adding mutex when calling link_group() or unlink_group(), but parent configfs_subsystem is NULL when config_item is root. So I create a mutex configfs_subsystem_mutex.","modified":"2026-09-01T16:05:29.373030172Z","published":"2024-08-22T04:15:16.010Z","upstream":["CVE-2022-48931"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-48931"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.12-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-48931.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.12-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-48931.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.12-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-48931.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}