CVE-2022-50671RDMA/rxe: Fix "kernel NULL pointer dereference" error
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix "kernel NULL pointer dereference" error When rxe_queue_init in the function rxe_qp_init_req fails, both qp->req.task.func and qp->req.task.arg are not initialized. Because of creation of qp fails, the function rxe_create_qp will call rxe_qp_do_cleanup to handle allocated resource. Before calling __rxe_do_task, both qp->req.task.func and qp->req.task.arg should be checked.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 8700e3e7c4857d28ebaa824509934556da0b3e76 builds before 48cd7098e71735ccafa0b3cf27c53924f9cb5b2f; from 8700e3e7c4857d28ebaa824509934556da0b3e76 before eca119693010032d6cc6e7e9b4fb2c363c7e12ce; 8700e3e7c4857d28ebaa824509934556da0b3e76 builds before 9c5dd6993c794703e74c6ba17ac78ca0211ef940; 8700e3e7c4857d28ebaa824509934556da0b3e76 builds before 0d773c58d702f0a7c16ee8d69617fd2c28350795; from 8700e3e7c4857d28ebaa824509934556da0b3e76 before cdce36a88def550773142a34ef727a830cad96a8; from 8700e3e7c4857d28ebaa824509934556da0b3e76 before f2f405af70e6f0419e718d23fa304798a5405c41; from 8700e3e7c4857d28ebaa824509934556da0b3e76 before bb33fa65da77f5f02dbee6f25cebaeedfcd70028; 8700e3e7c4857d28ebaa824509934556da0b3e76 builds before 3b8752f086eb6865cc3662ad13249b03024501e5; and 1 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/48cd7098e71735ccafa0b3cf27c53924f9cb5b2f
- https://git.kernel.org/stable/c/eca119693010032d6cc6e7e9b4fb2c363c7e12ce
- https://git.kernel.org/stable/c/9c5dd6993c794703e74c6ba17ac78ca0211ef940
- https://git.kernel.org/stable/c/0d773c58d702f0a7c16ee8d69617fd2c28350795
- https://git.kernel.org/stable/c/cdce36a88def550773142a34ef727a830cad96a8
- https://git.kernel.org/stable/c/f2f405af70e6f0419e718d23fa304798a5405c41
- https://git.kernel.org/stable/c/bb33fa65da77f5f02dbee6f25cebaeedfcd70028
- https://git.kernel.org/stable/c/3b8752f086eb6865cc3662ad13249b03024501e5
- https://git.kernel.org/stable/c/a625ca30eff806395175ebad3ac1399014bdb280
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.