# tty: fix deadlock caused by calling printk() under tty_port->lock

CVE record · `CVE-2022-49441`

- **Identifiers:** `CVE-2022-49441`
- **State:** Confirmed
- **Severity:** CVSS 5.5 Medium
- **Critical:** No
- **CNA:** Linux
- **Weakness (CWE):** [CWE-667](https://cwe.mitre.org/data/definitions/667.html)
- **Tags:** [CWE-667](https://agentprime.io/advisories/tag/cwe-667.md)
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 26 Feb 2025
- **Updated:** 23 May 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 26 Feb 2025, 02:12 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `d83904cb2eb2c4d937eaf15032214b0578f25099 to before 4af21b12a60ed2d3642284f4f85b42d7dc6ac246` (git)
  - affected: `deb1feaad03a78b545c949e54582ae57b3c56982 to before 4c253caf9264d2aa47ee806a87986dd8eb91a5d9` (git)
  - affected: `b6da31b2c07c46f2dcad1d86caa835227a16d9ff to before 04ee31678c128a6cc7bb057ea189a8624ba5a314` (git)
  - affected: `b6da31b2c07c46f2dcad1d86caa835227a16d9ff to before 3219ac364ac3d8d30771612a6010f1e0b7fa0a28` (git)
  - affected: `b6da31b2c07c46f2dcad1d86caa835227a16d9ff to before 9834b13e8b962caa28fbcf1f422dd82413da4ede` (git)
  - affected: `b6da31b2c07c46f2dcad1d86caa835227a16d9ff to before 18ca0d55e8639b911df8aae1b47598b13f9acded` (git)
  - affected: `b6da31b2c07c46f2dcad1d86caa835227a16d9ff to before b3c974501d0c32258ae0e04e5cc3fb92383b40f6` (git)
  - affected: `b6da31b2c07c46f2dcad1d86caa835227a16d9ff to before 0bcf44903ef4df742dcada86ccaedd25374ffb50` (git)
  - affected: `b6da31b2c07c46f2dcad1d86caa835227a16d9ff to before 6b9dbedbe3499fef862c4dff5217cf91f34e43b3` (git)
  - affected: `6d9cd12792270773fab9e5a129daff328d61ef9e` (git)
  - affected: `6dbfa9b5ae65063cd61dc7fa11332e00bb794d8b` (git)
  - affected: `60c4e8db32815474bfaeabe888ebb14e698caea1` (git)
  - and 5 more
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `4.18`
  - unaffected: `before 4.18` (semver)
  - unaffected: `4.9.318 to 4.9.*, inclusive` (semver)
  - unaffected: `4.14.283 to 4.14.*, inclusive` (semver)
  - unaffected: `4.19.247 to 4.19.*, inclusive` (semver)
  - unaffected: `5.4.198 to 5.4.*, inclusive` (semver)
  - unaffected: `5.10.121 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.46 to 5.15.*, inclusive` (semver)
  - unaffected: `5.17.14 to 5.17.*, inclusive` (semver)
  - unaffected: `5.18.3 to 5.18.*, inclusive` (semver)
  - unaffected: `5.19 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 5.5 Medium, CVSS 3.1: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`, from ADP (CISA-ADP)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0024, the 14th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 26 Feb 2025. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2022-49441](https://www.cve.org/CVERecord?id=CVE-2022-49441)
- [NVD: CVE-2022-49441](https://nvd.nist.gov/vuln/detail/CVE-2022-49441)

### References from the CNA

- <https://git.kernel.org/stable/c/4af21b12a60ed2d3642284f4f85b42d7dc6ac246>
- <https://git.kernel.org/stable/c/4c253caf9264d2aa47ee806a87986dd8eb91a5d9>
- <https://git.kernel.org/stable/c/04ee31678c128a6cc7bb057ea189a8624ba5a314>
- <https://git.kernel.org/stable/c/3219ac364ac3d8d30771612a6010f1e0b7fa0a28>
- <https://git.kernel.org/stable/c/9834b13e8b962caa28fbcf1f422dd82413da4ede>
- <https://git.kernel.org/stable/c/18ca0d55e8639b911df8aae1b47598b13f9acded>
- <https://git.kernel.org/stable/c/b3c974501d0c32258ae0e04e5cc3fb92383b40f6>
- <https://git.kernel.org/stable/c/0bcf44903ef4df742dcada86ccaedd25374ffb50>
- <https://git.kernel.org/stable/c/6b9dbedbe3499fef862c4dff5217cf91f34e43b3>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2022-49441>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2022-49441/>. Everything for agents: <https://agentprime.io/llms.txt>.