Answer in brief
CVE-2022-50202 records a Medium severity (CVSS 5.5) vulnerability in PM: hibernate: defer device probing when resuming from hibernation. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c751085943362143f84346d274e0011419c84202 <8c90947e5f1801e6c7120021c6ea0f3ad6a4eb91 || >=c751085943362143f84346d274e0011419c84202 <5a283b59bce72c05c60e9f0fa92a28b5b850d8bb || >=c751085943362143f84346d274e0011419c84202 <3c48d3067eaf878642276f053575a5c642600a50 || >=c751085943362143f84346d274e0011419c84202 <003a456ae6f70bb97e436e02fc5105be577c1570 || >=c751085943362143f84346d274e0011419c84202 <2f0e18e0db42f4f8bc87d3d98333680065ceeff8 || >=c751085943362143f84346d274e0011419c84202 <b8e1ae9433d7bd95f2dcc044a7a6f20a4c40d258 || >=c751085943362143f84346d274e0011419c84202 <f7042cf9dd40733f387b7cac021e626c74b8856f || >=c751085943362143f84346d274e0011419c84202 <8386c414e27caba8501119948e9551e52b527f59 | 8c90947e5f1801e6c7120021c6ea0f3ad6a4eb91, 5a283b59bce72c05c60e9f0fa92a28b5b850d8bb, 3c48d3067eaf878642276f053575a5c642600a50, 003a456ae6f70bb97e436e02fc5105be577c1570, 2f0e18e0db42f4f8bc87d3d98333680065ceeff8, b8e1ae9433d7bd95f2dcc044a7a6f20a4c40d258, f7042cf9dd40733f387b7cac021e626c74b8856f, 8386c414e27caba8501119948e9551e52b527f59 |
| Linux/Linuxgeneric | 2.6.30 | Not reported |
Published upstream
Jun 18, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 5, 2026
In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: defer device probing when resuming from hibernation syzbot is reporting hung task at misc_open() [1], for there is a race window of AB-BA deadlock which involves probe_count variable. Currently wait_for_device_probe() from snapshot_open() from misc_open() can sleep forever with misc_mtx held if probe_count cannot become 0. When a device is probed by hub_event() work function, probe_count is incremented before the probe function starts, and probe_count is decremented after the probe function completed. There are three cases that can prevent probe_count from dropping to 0. (a) A device being probed stopped responding (i.e. broken/malicious hardware). (b) A process emulating a USB device using /dev/raw-gadget interface stopped responding for some reason. (c) New device probe requests keeps coming in before existing device probe requests complete. The phenomenon syzbot is reporting is (b). A process which is holding system_transition_mutex and misc_mtx is waiting for probe_count to become 0 inside wait_for_device_probe(), but the probe function which is called from hub_event() work function is waiting for the processes which are blocked at mutex_lock(&misc_mtx) to respond via /dev/raw-gadget interface. This patch mitigates (b) by deferring wait_for_device_probe() from snapshot_open() to snapshot_write() and snapshot_ioctl(). Please note that the possibility of (b) remains as long as any thread which is emulating a USB device via /dev/raw-gadget interface can be blocked by uninterruptible blocking operations (e.g. mutex_lock()). Please also note that (a) and (c) are not addressed. Regarding (c), we should change the code to wait for only one device which contains the image for resuming from hibernation. I don't know how to address (a), for use of timeout for wait_for_device_probe() might result in loss of user data in the image. Maybe we should require the userland to wait for the image device before opening /dev/snapshot interface.
Quoted source text, attributed separately from HOL analysis.