CVE-2022-50671

High

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix "kernel NULL pointer dereference" error When rxe_queue_init in the function rxe_qp_init_req fails, both qp->req.task.func and qp->req.task.arg are not initialized. Because of creation of qp fails, the function rxe_create_qp will call rxe_qp_do_cleanup to handle allocated resource. Before calling __rxe_do_task, both qp->req.task.func and qp->req.task.arg should be checked.

SeverityHigh
CVSS7.5
Exploit probability—
ProductLinux
PublishedDec 9, 2025
First seenDec 9, 2025

How to fix

Update
  • Linux Linux48cd7098e71735ccafa0b3cf27c53924f9cb5b2f, eca119693010032d6cc6e7e9b4fb2c363c7e12ce, 9c5dd6993c794703e74c6ba17ac78ca0211ef940, 0d773c58d702f0a7c16ee8d69617fd2c28350795, cdce36a88def550773142a34ef727a830cad96a8, f2f405af70e6f0419e718d23fa304798a5405c41, bb33fa65da77f5f02dbee6f25cebaeedfcd70028, 3b8752f086eb6865cc3662ad13249b03024501e5, a625ca30eff806395175ebad3ac1399014bdb280 or later

Affected products

ProductAffected versionsFixed in
Linux Linux8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < 48cd7098e71735ccafa0b3cf27c53924f9cb5b2f, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < eca119693010032d6cc6e7e9b4fb2c363c7e12ce, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < 9c5dd6993c794703e74c6ba17ac78ca0211ef940, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < 0d773c58d702f0a7c16ee8d69617fd2c28350795, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < cdce36a88def550773142a34ef727a830cad96a8, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < f2f405af70e6f0419e718d23fa304798a5405c41, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < bb33fa65da77f5f02dbee6f25cebaeedfcd70028, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < 3b8752f086eb6865cc3662ad13249b03024501e5, 8700e3e7c4857d28ebaa824509934556da0b3e76 ≤ v < a625ca30eff806395175ebad3ac1399014bdb280, 4.848cd7098e71735ccafa0b3cf27c53924f9cb5b2f, eca119693010032d6cc6e7e9b4fb2c363c7e12ce, 9c5dd6993c794703e74c6ba17ac78ca0211ef940, 0d773c58d702f0a7c16ee8d69617fd2c28350795, cdce36a88def550773142a34ef727a830cad96a8, f2f405af70e6f0419e718d23fa304798a5405c41, bb33fa65da77f5f02dbee6f25cebaeedfcd70028, 3b8752f086eb6865cc3662ad13249b03024501e5, a625ca30eff806395175ebad3ac1399014bdb280

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-50671 · Linux · Dark Radar