CVE-2022-50135
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
18/06/2025
Last modified:
18/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
RDMA/rxe: Fix BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanup<br />
<br />
The function rxe_create_qp calls rxe_qp_from_init. If some error<br />
occurs, the error handler of function rxe_qp_from_init will set<br />
both scq and rcq to NULL.<br />
<br />
Then rxe_create_qp calls rxe_put to handle qp. In the end,<br />
rxe_qp_do_cleanup is called by rxe_put. rxe_qp_do_cleanup directly<br />
accesses scq and rcq before checking them. This will cause<br />
null-ptr-deref error.<br />
<br />
The call graph is as below:<br />
<br />
rxe_create_qp {<br />
...<br />
rxe_qp_from_init {<br />
...<br />
err1:<br />
...<br />
qp->rcq = NULL; scq = NULL; scq->num_wq); rcq->num_wq);
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.19 (including) | 5.19.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page