CVE-2022-50671
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix "kernel NULL pointer dereference" error When rxe_queue_init in the function rxe_qp_init_req fails, both qp->req.task.func and qp->req.task.arg are not initialized. Because of creation of qp fails, the function rxe_create_qp will call rxe_qp_do_cleanup to handle allocated resource. Before calling __rxe_do_task, both qp->req.task.func and qp->req.task.arg should be checked.
How to fix
- Linux Linux48cd7098e71735ccafa0b3cf27c53924f9cb5b2f, eca119693010032d6cc6e7e9b4fb2c363c7e12ce, 9c5dd6993c794703e74c6ba17ac78ca0211ef940, 0d773c58d702f0a7c16ee8d69617fd2c28350795, cdce36a88def550773142a34ef727a830cad96a8, f2f405af70e6f0419e718d23fa304798a5405c41, bb33fa65da77f5f02dbee6f25cebaeedfcd70028, 3b8752f086eb6865cc3662ad13249b03024501e5, a625ca30eff806395175ebad3ac1399014bdb280 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < 48cd7098e71735ccafa0b3cf27c53924f9cb5b2f, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < eca119693010032d6cc6e7e9b4fb2c363c7e12ce, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < 9c5dd6993c794703e74c6ba17ac78ca0211ef940, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < 0d773c58d702f0a7c16ee8d69617fd2c28350795, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < cdce36a88def550773142a34ef727a830cad96a8, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < f2f405af70e6f0419e718d23fa304798a5405c41, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < bb33fa65da77f5f02dbee6f25cebaeedfcd70028, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < 3b8752f086eb6865cc3662ad13249b03024501e5, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < a625ca30eff806395175ebad3ac1399014bdb280, 4.8 | 48cd7098e71735ccafa0b3cf27c53924f9cb5b2f, eca119693010032d6cc6e7e9b4fb2c363c7e12ce, 9c5dd6993c794703e74c6ba17ac78ca0211ef940, 0d773c58d702f0a7c16ee8d69617fd2c28350795, cdce36a88def550773142a34ef727a830cad96a8, f2f405af70e6f0419e718d23fa304798a5405c41, bb33fa65da77f5f02dbee6f25cebaeedfcd70028, 3b8752f086eb6865cc3662ad13249b03024501e5, a625ca30eff806395175ebad3ac1399014bdb280 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.