What’s Vulnerable › Vulnerabilities

CVE-2022-50671: RDMA/rxe: Fix "kernel NULL pointer dereference" error

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-10-15

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix "kernel NULL pointer dereference" error When rxe_queue_init in the function rxe_qp_init_req fails, both qp->req.task.func and qp->req.task.arg are not initialized. Because of creation of qp fails, the function rxe_create_qp will call rxe_qp_do_cleanup to handle allocated resource. Before calling __rxe_do_task, both qp->req.task.func and qp->req.task.arg should be checked.

Affected products

• Linux kernel: 4.8 — fixed in 6.1

How to fix

Upgrade to a fixed version: Linux kernel 6.1. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0d773c58d702f0a7c16ee8d69617fd2c28350795
• https://git.kernel.org/stable/c/3b8752f086eb6865cc3662ad13249b03024501e5
• https://git.kernel.org/stable/c/48cd7098e71735ccafa0b3cf27c53924f9cb5b2f
• https://git.kernel.org/stable/c/9c5dd6993c794703e74c6ba17ac78ca0211ef940
• https://git.kernel.org/stable/c/a625ca30eff806395175ebad3ac1399014bdb280
• https://git.kernel.org/stable/c/bb33fa65da77f5f02dbee6f25cebaeedfcd70028
• https://git.kernel.org/stable/c/cdce36a88def550773142a34ef727a830cad96a8
• https://git.kernel.org/stable/c/eca119693010032d6cc6e7e9b4fb2c363c7e12ce
• https://git.kernel.org/stable/c/f2f405af70e6f0419e718d23fa304798a5405c41

Get alerted when CVE-2022-50671 or the next vulnerability affects your stack