{"id":"CVE-2022-50671","title":"RDMA/rxe: Fix \"kernel NULL pointer dereference\" error","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix \"kernel NULL pointer dereference\" error\n\nWhen rxe_queue_init in the function rxe_qp_init_req fails,\nboth qp->req.task.func and qp->req.task.arg are not in…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 48cd7098e71735ccafa0b3cf27c53924f9cb5b2f","Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < eca119693010032d6cc6e7e9b4fb2c363c7e12ce","Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 9c5dd6993c794703e74c6ba17ac78ca0211ef940","Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 0d773c58d702f0a7c16ee8d69617fd2c28350795","Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < cdce36a88def550773142a34ef727a830cad96a8","Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < f2f405af70e6f0419e718d23fa304798a5405c41","Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < bb33fa65da77f5f02dbee6f25cebaeedfcd70028","Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 3b8752f086eb6865cc3662ad13249b03024501e5","Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < a625ca30eff806395175ebad3ac1399014bdb280","Linux 4.8"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-15T21:31:57.230489Z"},"published":"2025-12-09","updated":"2026-10-15","sourceUpdated":"2026-10-15T21:41:22.558Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-50671","references":[{"url":"https://git.kernel.org/stable/c/48cd7098e71735ccafa0b3cf27c53924f9cb5b2f"},{"url":"https://git.kernel.org/stable/c/eca119693010032d6cc6e7e9b4fb2c363c7e12ce"},{"url":"https://git.kernel.org/stable/c/9c5dd6993c794703e74c6ba17ac78ca0211ef940"},{"url":"https://git.kernel.org/stable/c/0d773c58d702f0a7c16ee8d69617fd2c28350795"},{"url":"https://git.kernel.org/stable/c/cdce36a88def550773142a34ef727a830cad96a8"},{"url":"https://git.kernel.org/stable/c/f2f405af70e6f0419e718d23fa304798a5405c41"},{"url":"https://git.kernel.org/stable/c/bb33fa65da77f5f02dbee6f25cebaeedfcd70028"},{"url":"https://git.kernel.org/stable/c/3b8752f086eb6865cc3662ad13249b03024501e5"},{"url":"https://git.kernel.org/stable/c/a625ca30eff806395175ebad3ac1399014bdb280"}],"tags":["cve.org"],"epss":0.00954,"epssPercentile":0.60541,"ingestedAt":"2026-10-15T22:48:25.379Z","slug":"CVE-2022-50671","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix \"kernel NULL pointer dereference\" error\n\nWhen rxe_queue_init in the function rxe_qp_init_req fails,\nboth qp->req.task.func and qp->req.task.arg are not initialized.\n\nBecause of creation of qp fails, the function rxe_create_qp will\ncall rxe_qp_do_cleanup to handle allocated resource.\n\nBefore calling __rxe_do_task, both qp->req.task.func and\nqp->req.task.arg should be checked.\n\n## Affected\n\n- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 48cd7098e71735ccafa0b3cf27c53924f9cb5b2f`\n- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < eca119693010032d6cc6e7e9b4fb2c363c7e12ce`\n- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 9c5dd6993c794703e74c6ba17ac78ca0211ef940`\n- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 0d773c58d702f0a7c16ee8d69617fd2c28350795`\n- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < cdce36a88def550773142a34ef727a830cad96a8`\n- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < f2f405af70e6f0419e718d23fa304798a5405c41`\n- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < bb33fa65da77f5f02dbee6f25cebaeedfcd70028`\n- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 3b8752f086eb6865cc3662ad13249b03024501e5`\n- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < a625ca30eff806395175ebad3ac1399014bdb280`\n- `Linux 4.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}