CVE-2022-50202
Linux Kernel vulnerability analysis and mitigation

Overview

A race condition vulnerability was identified in the Linux kernel's hibernation functionality that could lead to a deadlock scenario. The issue involves the probe_count variable during device probing when resuming from hibernation, discovered and disclosed on June 18, 2025 (NVD).

Technical details

The vulnerability occurs when waitfordeviceprobe() from snapshotopen() from miscopen() can sleep indefinitely while holding miscmtx if probecount cannot become 0. The probecount variable is incremented before a device probe function starts and decremented after it completes. A deadlock can occur when a process holding both systemtransitionmutex and miscmtx waits for probecount to become 0, while the probe function waits for processes blocked at mutexlock(&miscmtx) to respond via the /dev/raw-gadget interface (NVD, Wiz).

Impact

The vulnerability can result in a system hang due to deadlock conditions. This can occur in three scenarios: when a device being probed stops responding, when a process emulating a USB device via /dev/raw-gadget interface stops responding, or when new device probe requests keep coming before existing ones complete (NVD).

Mitigation and workarounds

The issue has been patched by deferring waitfordeviceprobe() from snapshotopen() to snapshotwrite() and snapshotioctl(). However, the possibility of deadlock remains if threads emulating USB devices via /dev/raw-gadget can be blocked by uninterruptible blocking operations (NVD).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-40205HIGH7.8
  • Linux KernelLinux Kernel
  • linux-gcp-5.4
NoYesNov 12, 2025
CVE-2025-40211HIGH7.1
  • Linux KernelLinux Kernel
  • linux-gcp-6.8
NoYesNov 21, 2025
CVE-2025-40206MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-zfcpdump-modules-extra
NoYesNov 12, 2025
CVE-2025-40210MEDIUM5.1
  • Linux KernelLinux Kernel
  • kernel-rt-64k-modules
NoYesNov 21, 2025
CVE-2025-40212N/AN/A
  • Linux KernelLinux Kernel
  • linux-azure-6.14
NoYesNov 24, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management