<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 17:03:52 +0000</lastBuildDate>
    <item>
      <title>CVE-2022-49379 — driver core: Fix wait_for_device_probe() &amp; deferred_probe_timeout interaction</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2022-49379</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;driver core: Fix wait_for_device_probe() &amp;amp; deferred_probe_timeout interaction&lt;/p&gt;
&lt;p&gt;Mounting NFS rootfs was timing out when deferred_probe_timeout was
non-zero [1].  This was because ip_auto_config() initcall times out
waiting for the network interfaces to show up when
deferred_probe_timeout was non-zero. While ip_auto_config() calls
wait_for_device_probe() to make sure any currently running deferred
probe work or asynchronous probe finishes, that wasn&amp;#39;t sufficient to
account for devices being deferred until deferred_probe_timeout.&lt;/p&gt;
&lt;p&gt;Commit 35a672363ab3 (&amp;#34;driver core: Ensure wait_for_device_probe() waits
until the deferred_probe_timeout fires&amp;#34;) tried to fix that by making
sure wait_for_device_probe() waits for deferred_probe_timeout to expire
before returning.&lt;/p&gt;
&lt;p&gt;However, if wait_for_device_probe() is called from the kernel_init()
context:&lt;/p&gt;
&lt;p&gt;- Before deferred_probe_initcall() [2], it causes the boot process to
  hang due to a deadlock.&lt;/p&gt;
&lt;p&gt;- After deferred_probe_initcall() [3], it blocks kernel_init() from
  continuing till deferred_probe_timeout expires and beats the point of
  deferred_probe_timeout that&amp;#39;s trying to wait for userspace to load
  modules.&lt;/p&gt;
&lt;p&gt;Neither of this is good. So revert the changes to
wait_for_device_probe().&lt;/p&gt;
&lt;p&gt;[1] - https://lore.kernel.org/lkml/TYAPR01MB45443DF63B9EF29054F7C41FD8C60@TYAPR01MB4544.jpnprd01.prod.outlook.com/
[2] - https://lore.kernel.org/lkml/YowHNo4sBjr9ijZr@dev-arch.thelio-3990X/
[…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;driver core: Fix wait_for_device_probe() &amp;amp; deferred_probe_timeout interaction&lt;/p&gt;
&lt;p&gt;Mounting NFS rootfs was timing out when deferred_probe_timeout was
non-zero [1].  This was because ip_auto_config() initcall times out
waiting for the network interfaces to show up when
deferred_probe_timeout was non-zero. While ip_auto_config() calls
wait_for_device_probe() to make sure any currently running deferred
probe work or asynchronous probe finishes, that wasn&amp;#39;t sufficient to
account for devices being deferred until deferred_probe_timeout.&lt;/p&gt;
&lt;p&gt;Commit 35a672363ab3 (&amp;#34;driver core: Ensure wait_for_device_probe() waits
until the deferred_probe_timeout fires&amp;#34;) tried to fix that by making
sure wait_for_device_probe() waits for deferred_probe_timeout to expire
before returning.&lt;/p&gt;
&lt;p&gt;However, if wait_for_device_probe() is called from the kernel_init()
context:&lt;/p&gt;
&lt;p&gt;- Before deferred_probe_initcall() [2], it causes the boot process to
  hang due to a deadlock.&lt;/p&gt;
&lt;p&gt;- After deferred_probe_initcall() [3], it blocks kernel_init() from
  continuing till deferred_probe_timeout expires and beats the point of
  deferred_probe_timeout that&amp;#39;s trying to wait for userspace to load
  modules.&lt;/p&gt;
&lt;p&gt;Neither of this is good. So revert the changes to
wait_for_device_probe().&lt;/p&gt;
&lt;p&gt;[1] - https://lore.kernel.org/lkml/TYAPR01MB45443DF63B9EF29054F7C41FD8C60@TYAPR01MB4544.jpnprd01.prod.outlook.com/
[2] - https://lore.kernel.org/lkml/YowHNo4sBjr9ijZr@dev-arch.thelio-3990X/
[…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2022-49379</guid>
    </item>
  </channel>
</rss>
