CVE-2022-50671

HighCVSS 7.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix "kernel NULL pointer dereference" error

When rxe_queue_init in the function rxe_qp_init_req fails, both qp->req.task.func and qp->req.task.arg are not initialized.

Because of creation of qp fails, the function rxe_create_qp will call rxe_qp_do_cleanup to handle allocated resource.

Before calling __rxe_do_task, both qp->req.task.func and qp->req.task.arg should be checked.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 8700e3e7c4857d28ebaa824509934556da0b3e76, < 48cd7098e71735ccafa0b3cf27c53924f9cb5b2f; >= 8700e3e7c4857d28ebaa824509934556da0b3e76, < eca119693010032d6cc6e7e9b4fb2c363c7e12ce; >= 8700e3e7c4857d28ebaa824509934556da0b3e76, < 9c5dd6993c794703e74c6ba17ac78ca0211ef940; >= 8700e3e7c4857d28ebaa824509934556da0b3e76, < 0d773c58d702f0a7c16ee8d69617fd2c28350795; >= 8700e3e7c4857d28ebaa824509934556da0b3e76, < cdce36a88def550773142a34ef727a830cad96a8; >= 8700e3e7c4857d28ebaa824509934556da0b3e76, < f2f405af70e6f0419e718d23fa304798a5405c41; >= 8700e3e7c4857d28ebaa824509934556da0b3e76, < bb33fa65da77f5f02dbee6f25cebaeedfcd70028; >= 8700e3e7c4857d28ebaa824509934556da0b3e76, < 3b8752f086eb6865cc3662ad13249b03024501e5; >= 8700e3e7c4857d28ebaa824509934556da0b3e76, < a625ca30eff806395175ebad3ac1399014bdb280
LinuxLinux4.8

References

Timeline

Published
Dec 9, 2025
Last modified
Oct 15, 2026
NVD status
Deferred

Related CVEs from 2022

CVE-2022-50672In the Linux kernel, the following vulnerability has been resolved: mailbox: zynq-ipi: fix error handling while device_register() fails IfCVE-2022-506737.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4_orphan_cleanup I caught a issue as foCVE-2022-50674In the Linux kernel, the following vulnerability has been resolved: riscv: vdso: fix NULL deference in vdso_join_timens() when vfork TestiCVE-2022-50675In the Linux kernel, the following vulnerability has been resolved: arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored CVE-2022-506767.5In the Linux kernel, the following vulnerability has been resolved: net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_CVE-2022-506777.0In the Linux kernel, the following vulnerability has been resolved: ipmi: fix use after free in _ipmi_destroy_user() The intf_free() functCVE-2022-50678In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix invalid address access when enabling SCAN log levelCVE-2022-50679In the Linux kernel, the following vulnerability has been resolved: i40e: Fix DMA mappings leak During reallocation of RX buffers, new DMACVE-2022-506804.8A stored cross-site scripting vulnerability in Kentico Xperience allows administration users to inject malicious scripts via email marketingCVE-2022-506816.1A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via administration input fiCVE-2022-506826.5A CRLF injection vulnerability in Kentico Xperience allows attackers to manipulate URL query string redirects via improper encoding in the rCVE-2022-506835.4A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form redirect URL configur
CVE-2022-50671: High severity, CVSS 7.5 | Vulnix