Recursive Locking Violation in USB Core Drivers by Linux Kernel

CVE-2022-49936

What is CVE-2022-49936?

A recursive locking violation was discovered in the Linux kernel's USB storage driver, resulting from a nested device reset attempt during driver unbinding. This issue arises when the rtl8712 driver, upon disconnecting, erroneously initiates a reset while another reset is in progress. Such behavior can lead to system instability and enhance the risk of deadlocks. To mitigate future occurrences, the USB core lacks safeguards against nested reset calls, prompting the addition of a reset_in_progress flag to prevent similar incidents.

References