{"id":"DEBIAN-CVE-2022-49259","details":"In the Linux kernel, the following vulnerability has been resolved:  block: don't delete queue kobject before its children  kobjects aren't supposed to be deleted before their child kobjects are deleted.  Apparently this is usually benign; however, a WARN will be triggered if one of the child kobjects has a named attribute group:      sysfs group 'modes' not found for kobject 'crypto'     WARNING: CPU: 0 PID: 1 at fs/sysfs/group.c:278 sysfs_remove_group+0x72/0x80     ...     Call Trace:       sysfs_remove_groups+0x29/0x40 fs/sysfs/group.c:312       __kobject_del+0x20/0x80 lib/kobject.c:611       kobject_cleanup+0xa4/0x140 lib/kobject.c:696       kobject_release lib/kobject.c:736 [inline]       kref_put include/linux/kref.h:65 [inline]       kobject_put+0x53/0x70 lib/kobject.c:753       blk_crypto_sysfs_unregister+0x10/0x20 block/blk-crypto-sysfs.c:159       blk_unregister_queue+0xb0/0x110 block/blk-sysfs.c:962       del_gendisk+0x117/0x250 block/genhd.c:610  Fix this by moving the kobject_del() and the corresponding kobject_uevent() to the correct place.","modified":"2026-09-01T16:05:30.413098181Z","published":"2025-02-26T07:01:02.850Z","upstream":["CVE-2022-49259"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-49259"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.17.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49259.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.17.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49259.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.17.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49259.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}