# drivers: tty: serial: Fix deadlock in sa1100_set_termios()

CVE record · `CVE-2022-49304`

- **Identifiers:** `CVE-2022-49304`
- **State:** Confirmed
- **Severity:** CVSS 5.5 Medium
- **Critical:** No
- **CNA:** Linux
- **Weakness (CWE):** [CWE-667](https://cwe.mitre.org/data/definitions/667.html)
- **Tags:** [CWE-667](https://agentprime.io/advisories/tag/cwe-667.md)
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 26 Feb 2025
- **Updated:** 11 May 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 26 Feb 2025, 02:10 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0976808d0d171ec837d4bd3e9f4ad4a00ab703b8` (git)
  - affected: `1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 85e20f8bd31a46d8c60103d0274a8ebe8f47f2b2` (git)
  - affected: `1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 920f0ae7a129ffee98a106e3bbdfd61a2a59e939` (git)
  - affected: `1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 09a5958a2452ad22d0cb638711ef34ea1863a829` (git)
  - affected: `1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6e2273eefab54a521d9c59efb6e1114e742bdf41` (git)
  - affected: `1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2cbfc38df580bff5b2fe19f21c1a7520efcc4b3b` (git)
  - affected: `1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 553213432ef0c295becdc08c0207d2094468f673` (git)
  - affected: `1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 34d91e555e5582cffdbcbb75517bc9217866823e` (git)
  - affected: `1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 62b2caef400c1738b6d22f636c628d9f85cd4c4c` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `2.6.12`
  - unaffected: `before 2.6.12` (semver)
  - unaffected: `4.9.318 to 4.9.*, inclusive` (semver)
  - unaffected: `4.14.283 to 4.14.*, inclusive` (semver)
  - unaffected: `4.19.247 to 4.19.*, inclusive` (semver)
  - unaffected: `5.4.198 to 5.4.*, inclusive` (semver)
  - unaffected: `5.10.122 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.47 to 5.15.*, inclusive` (semver)
  - unaffected: `5.17.15 to 5.17.*, inclusive` (semver)
  - unaffected: `5.18.4 to 5.18.*, inclusive` (semver)
  - unaffected: `5.19 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 5.5 Medium, CVSS 3.1: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`, from ADP (CISA-ADP)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0020, the 10th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 26 Feb 2025. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2022-49304](https://www.cve.org/CVERecord?id=CVE-2022-49304)
- [NVD: CVE-2022-49304](https://nvd.nist.gov/vuln/detail/CVE-2022-49304)

### References from the CNA

- <https://git.kernel.org/stable/c/0976808d0d171ec837d4bd3e9f4ad4a00ab703b8>
- <https://git.kernel.org/stable/c/85e20f8bd31a46d8c60103d0274a8ebe8f47f2b2>
- <https://git.kernel.org/stable/c/920f0ae7a129ffee98a106e3bbdfd61a2a59e939>
- <https://git.kernel.org/stable/c/09a5958a2452ad22d0cb638711ef34ea1863a829>
- <https://git.kernel.org/stable/c/6e2273eefab54a521d9c59efb6e1114e742bdf41>
- <https://git.kernel.org/stable/c/2cbfc38df580bff5b2fe19f21c1a7520efcc4b3b>
- <https://git.kernel.org/stable/c/553213432ef0c295becdc08c0207d2094468f673>
- <https://git.kernel.org/stable/c/34d91e555e5582cffdbcbb75517bc9217866823e>
- <https://git.kernel.org/stable/c/62b2caef400c1738b6d22f636c628d9f85cd4c4c>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2022-49304>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2022-49304/>. Everything for agents: <https://agentprime.io/llms.txt>.