---
id: CVE-2022-50671
title: 'RDMA/rxe: Fix "kernel NULL pointer dereference" error'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/rxe: Fix "kernel NULL pointer dereference" error

  When rxe_queue_init in the function rxe_qp_init_req fails,
  both qp->req.task.func and qp->req.task.arg are not in…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 <
    48cd7098e71735ccafa0b3cf27c53924f9cb5b2f
  - >-
    Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 <
    eca119693010032d6cc6e7e9b4fb2c363c7e12ce
  - >-
    Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 <
    9c5dd6993c794703e74c6ba17ac78ca0211ef940
  - >-
    Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 <
    0d773c58d702f0a7c16ee8d69617fd2c28350795
  - >-
    Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 <
    cdce36a88def550773142a34ef727a830cad96a8
  - >-
    Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 <
    f2f405af70e6f0419e718d23fa304798a5405c41
  - >-
    Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 <
    bb33fa65da77f5f02dbee6f25cebaeedfcd70028
  - >-
    Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 <
    3b8752f086eb6865cc3662ad13249b03024501e5
  - >-
    Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 <
    a625ca30eff806395175ebad3ac1399014bdb280
  - Linux 4.8
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-15T21:31:57.230489Z'
published: '2025-12-09'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T21:41:22.558Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50671'
references:
  - url: 'https://git.kernel.org/stable/c/48cd7098e71735ccafa0b3cf27c53924f9cb5b2f'
  - url: 'https://git.kernel.org/stable/c/eca119693010032d6cc6e7e9b4fb2c363c7e12ce'
  - url: 'https://git.kernel.org/stable/c/9c5dd6993c794703e74c6ba17ac78ca0211ef940'
  - url: 'https://git.kernel.org/stable/c/0d773c58d702f0a7c16ee8d69617fd2c28350795'
  - url: 'https://git.kernel.org/stable/c/cdce36a88def550773142a34ef727a830cad96a8'
  - url: 'https://git.kernel.org/stable/c/f2f405af70e6f0419e718d23fa304798a5405c41'
  - url: 'https://git.kernel.org/stable/c/bb33fa65da77f5f02dbee6f25cebaeedfcd70028'
  - url: 'https://git.kernel.org/stable/c/3b8752f086eb6865cc3662ad13249b03024501e5'
  - url: 'https://git.kernel.org/stable/c/a625ca30eff806395175ebad3ac1399014bdb280'
tags:
  - cve.org
epss: 0.00954
epssPercentile: 0.60541
ingestedAt: '2026-10-15T22:48:25.379Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix "kernel NULL pointer dereference" error

When rxe_queue_init in the function rxe_qp_init_req fails,
both qp->req.task.func and qp->req.task.arg are not initialized.

Because of creation of qp fails, the function rxe_create_qp will
call rxe_qp_do_cleanup to handle allocated resource.

Before calling __rxe_do_task, both qp->req.task.func and
qp->req.task.arg should be checked.

## Affected

- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 48cd7098e71735ccafa0b3cf27c53924f9cb5b2f`
- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < eca119693010032d6cc6e7e9b4fb2c363c7e12ce`
- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 9c5dd6993c794703e74c6ba17ac78ca0211ef940`
- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 0d773c58d702f0a7c16ee8d69617fd2c28350795`
- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < cdce36a88def550773142a34ef727a830cad96a8`
- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < f2f405af70e6f0419e718d23fa304798a5405c41`
- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < bb33fa65da77f5f02dbee6f25cebaeedfcd70028`
- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 3b8752f086eb6865cc3662ad13249b03024501e5`
- `Linux >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < a625ca30eff806395175ebad3ac1399014bdb280`
- `Linux 4.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.