What’s Vulnerable › Vulnerabilities

CVE-2022-50138: RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() __qedr_alloc_mr() allocates a memory chunk for "mr->info.pbl_table" with init_mr_info(). When rdma_alloc_tid() and rdma_register_tid() fail, "mr" is released while "mr->info.pbl_table" is not released, which will lead to a memory leak. We should release the "mr->info.pbl_table" with qedr_free_pbl() when error occurs to fix the memory leak.

Affected products

• Linux kernel: from 4.9 before 5.10.137; from 5.11 before 5.15.61; from 5.16 before 5.18.18; from 5.19 before 5.19.2 — fixed in 5.10.137, 5.15.61, 5.18.18, 5.19.2

How to fix

Upgrade to a fixed version: Linux kernel 5.10.137, 5.15.61, 5.18.18, 5.19.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/07ba048df306dc93fc4d2ef670b9e24644a2069f
• https://git.kernel.org/stable/c/79ce50dddaf28b5c57911ecc80a2be17a0b17f83
• https://git.kernel.org/stable/c/7e647a8d5fc0a2c8e0f36f585a6388286a25bb15
• https://git.kernel.org/stable/c/b3236a64ddd125a455ef5b5316c1b9051b732974
• https://git.kernel.org/stable/c/b4c9f7db9f0148423557539af0fdf513338efe08

Get alerted when CVE-2022-50138 or the next vulnerability affects your stack