CVE-2022-50671 - Vulnerability Details

- RDMA/rxe: Fix "kernel NULL pointer dereference" error

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix "kernel NULL pointer dereference" error

When rxe_queue_init in the function rxe_qp_init_req fails,
both qp->req.task.func and qp->req.task.arg are not initialized.

Because of creation of qp fails, the function rxe_create_qp will
call rxe_qp_do_cleanup to handle allocated resource.

Before calling __rxe_do_task, both qp->req.task.func and
qp->req.task.arg should be checked.

Published: 2025-12-09

Score: 7.0 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`8700e3e7c4857d28ebaa824509934556da0b3e76`	affected	< 48cd7098e71735ccafa0b3cf27c53924f9cb5b2f
`8700e3e7c4857d28ebaa824509934556da0b3e76`	affected	< eca119693010032d6cc6e7e9b4fb2c363c7e12ce
`8700e3e7c4857d28ebaa824509934556da0b3e76`	affected	< 9c5dd6993c794703e74c6ba17ac78ca0211ef940
`8700e3e7c4857d28ebaa824509934556da0b3e76`	affected	< 0d773c58d702f0a7c16ee8d69617fd2c28350795
`8700e3e7c4857d28ebaa824509934556da0b3e76`	affected	< cdce36a88def550773142a34ef727a830cad96a8
`8700e3e7c4857d28ebaa824509934556da0b3e76`	affected	< f2f405af70e6f0419e718d23fa304798a5405c41
`8700e3e7c4857d28ebaa824509934556da0b3e76`	affected	< bb33fa65da77f5f02dbee6f25cebaeedfcd70028
`8700e3e7c4857d28ebaa824509934556da0b3e76`	affected	< 3b8752f086eb6865cc3662ad13249b03024501e5
`8700e3e7c4857d28ebaa824509934556da0b3e76`	affected	< a625ca30eff806395175ebad3ac1399014bdb280

Linux

affected

Version	Status	Constraints
`4.8`	affected	—
`0`	unaffected	< 4.8
`4.9.331`	unaffected	≤ 4.9.*
`4.14.296`	unaffected	≤ 4.14.*
`4.19.262`	unaffected	≤ 4.19.*
`5.4.220`	unaffected	≤ 5.4.*
`5.10.150`	unaffected	≤ 5.10.*
`5.15.75`	unaffected	≤ 5.15.*
`5.19.17`	unaffected	≤ 5.19.*
`6.0.3`	unaffected	≤ 6.0.*
`6.1`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0004.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/0d773c58d702f0a7c16ee8d69617fd2c28350795
https://git.kernel.org/stable/c/3b8752f086eb6865cc3662ad13249b03024501e5
https://git.kernel.org/stable/c/48cd7098e71735ccafa0b3cf27c53924f9cb5b2f
https://git.kernel.org/stable/c/9c5dd6993c794703e74c6ba17ac78ca0211ef940
https://git.kernel.org/stable/c/a625ca30eff806395175ebad3ac1399014bdb280
https://git.kernel.org/stable/c/bb33fa65da77f5f02dbee6f25cebaeedfcd70028
https://git.kernel.org/stable/c/cdce36a88def550773142a34ef727a830cad96a8
https://git.kernel.org/stable/c/eca119693010032d6cc6e7e9b4fb2c363c7e12ce
https://git.kernel.org/stable/c/f2f405af70e6f0419e718d23fa304798a5405c41
https://lore.kernel.org/linux-cve-announce/2025120946-CVE-2022-50671-e025@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-50671
https://www.cve.org/CVERecord?id=CVE-2022-50671

History

Wed, 10 Dec 2025 00:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025120946-CVE-2022-50671-e025@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2022-50671 https://www.cve.org/CVERecord?id=CVE-2022-50671
Metrics	threat_severity `None`	cvssV3_1 `{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}` threat_severity `Moderate`

Tue, 09 Dec 2025 02:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix "kernel NULL pointer dereference" error When rxe_queue_init in the function rxe_qp_init_req fails, both qp->req.task.func and qp->req.task.arg are not initialized. Because of creation of qp fails, the function rxe_create_qp will call rxe_qp_do_cleanup to handle allocated resource. Before calling __rxe_do_task, both qp->req.task.func and qp->req.task.arg should be checked.
Title		RDMA/rxe: Fix "kernel NULL pointer dereference" error
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0d773c58d702f0a7c16ee8d69617fd2c28350795 https://git.kernel.org/stable/c/3b8752f086eb6865cc3662ad13249b03024501e5 https://git.kernel.org/stable/c/48cd7098e71735ccafa0b3cf27c53924f9cb5b2f https://git.kernel.org/stable/c/9c5dd6993c794703e74c6ba17ac78ca0211ef940 https://git.kernel.org/stable/c/a625ca30eff806395175ebad3ac1399014bdb280 https://git.kernel.org/stable/c/bb33fa65da77f5f02dbee6f25cebaeedfcd70028 https://git.kernel.org/stable/c/cdce36a88def550773142a34ef727a830cad96a8 https://git.kernel.org/stable/c/eca119693010032d6cc6e7e9b4fb2c363c7e12ce https://git.kernel.org/stable/c/f2f405af70e6f0419e718d23fa304798a5405c41

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-09T01:29:22.950Z

Updated: 2026-05-11T19:23:22.511Z

Reserved: 2025-12-09T01:26:45.991Z

Link: CVE-2022-50671

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-09T16:17:19.227

Modified: 2026-04-15T00:35:42.020

Link: CVE-2022-50671

Redhat

Severity : Moderate

Publid Date: 2025-12-09T00:00:00Z

Links: CVE-2022-50671 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object