Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2022-49304

drivers: tty: serial: Fix deadlock in sa1100_set_termios()

CVSS 5.5 MediumEPSS 0.0020 · 10th percentile

Published by the CVE Program (CNA: Linux) at 26 Feb 2025, 02:10 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0976808d0d171ec837d4bd3e9f4ad4a00ab703b8 git
  • affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 85e20f8bd31a46d8c60103d0274a8ebe8f47f2b2 git
  • affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 920f0ae7a129ffee98a106e3bbdfd61a2a59e939 git
  • affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 09a5958a2452ad22d0cb638711ef34ea1863a829 git
  • affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6e2273eefab54a521d9c59efb6e1114e742bdf41 git
  • affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2cbfc38df580bff5b2fe19f21c1a7520efcc4b3b git
  • affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 553213432ef0c295becdc08c0207d2094468f673 git
  • affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 34d91e555e5582cffdbcbb75517bc9217866823e git
  • affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 62b2caef400c1738b6d22f636c628d9f85cd4c4c git
Other versions: unaffected
Linux Linux
  • affected 2.6.12
  • unaffected before 2.6.12 semver
  • unaffected 4.9.318 to 4.9.*, inclusive semver
  • unaffected 4.14.283 to 4.14.*, inclusive semver
  • unaffected 4.19.247 to 4.19.*, inclusive semver
  • unaffected 5.4.198 to 5.4.*, inclusive semver
  • unaffected 5.10.122 to 5.10.*, inclusive semver
  • unaffected 5.15.47 to 5.15.*, inclusive semver
  • unaffected 5.17.15 to 5.17.*, inclusive semver
  • unaffected 5.18.4 to 5.18.*, inclusive semver
  • unaffected 5.19 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2022-49304
CNA
Linux
Weakness (CWE)
CWE-667
Tags
Published
26 Feb 2025
Updated
11 May 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
5.5 Medium 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H ADP (CISA-ADP)
  • CISA KEV Not listed.
  • EPSS 0.0020, the 10th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 26 Feb 2025. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.