In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix "kernel NULL pointer dereference" error

When rxe_queue_init in the function rxe_qp_init_req fails,
both qp->req.task.func and qp->req.task.arg are not initialized.

Because of creation of qp fails, the function rxe_create_qp will
call rxe_qp_do_cleanup to handle allocated resource.

Before calling __rxe_do_task, both qp->req.task.func and
qp->req.task.arg should be checked.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00049.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
8700e3e7c4857d28ebaa824509934556da0b3e76 affected < 48cd7098e71735ccafa0b3cf27c53924f9cb5b2f
8700e3e7c4857d28ebaa824509934556da0b3e76 affected < eca119693010032d6cc6e7e9b4fb2c363c7e12ce
8700e3e7c4857d28ebaa824509934556da0b3e76 affected < 9c5dd6993c794703e74c6ba17ac78ca0211ef940
8700e3e7c4857d28ebaa824509934556da0b3e76 affected < 0d773c58d702f0a7c16ee8d69617fd2c28350795
8700e3e7c4857d28ebaa824509934556da0b3e76 affected < cdce36a88def550773142a34ef727a830cad96a8
8700e3e7c4857d28ebaa824509934556da0b3e76 affected < f2f405af70e6f0419e718d23fa304798a5405c41
8700e3e7c4857d28ebaa824509934556da0b3e76 affected < bb33fa65da77f5f02dbee6f25cebaeedfcd70028
8700e3e7c4857d28ebaa824509934556da0b3e76 affected < 3b8752f086eb6865cc3662ad13249b03024501e5
8700e3e7c4857d28ebaa824509934556da0b3e76 affected < a625ca30eff806395175ebad3ac1399014bdb280
Linux Linux affected
Version Status Constraints
4.8 affected —
0 unaffected < 4.8
4.9.331 unaffected ≤ 4.9.*
4.14.296 unaffected ≤ 4.14.*
4.19.262 unaffected ≤ 4.19.*
5.4.220 unaffected ≤ 5.4.*
5.10.150 unaffected ≤ 5.10.*
5.15.75 unaffected ≤ 5.15.*
5.19.17 unaffected ≤ 5.19.*
6.0.3 unaffected ≤ 6.0.*
6.1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0d773c58d702f0a7c16ee8d69617fd2c28350795 cve-icon cve-icon
https://git.kernel.org/stable/c/3b8752f086eb6865cc3662ad13249b03024501e5 cve-icon cve-icon
https://git.kernel.org/stable/c/48cd7098e71735ccafa0b3cf27c53924f9cb5b2f cve-icon cve-icon
https://git.kernel.org/stable/c/9c5dd6993c794703e74c6ba17ac78ca0211ef940 cve-icon cve-icon
https://git.kernel.org/stable/c/a625ca30eff806395175ebad3ac1399014bdb280 cve-icon cve-icon
https://git.kernel.org/stable/c/bb33fa65da77f5f02dbee6f25cebaeedfcd70028 cve-icon cve-icon
https://git.kernel.org/stable/c/cdce36a88def550773142a34ef727a830cad96a8 cve-icon cve-icon
https://git.kernel.org/stable/c/eca119693010032d6cc6e7e9b4fb2c363c7e12ce cve-icon cve-icon
https://git.kernel.org/stable/c/f2f405af70e6f0419e718d23fa304798a5405c41 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025120946-CVE-2022-50671-e025@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50671 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50671 cve-icon
History

Wed, 10 Dec 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Tue, 09 Dec 2025 02:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix "kernel NULL pointer dereference" error When rxe_queue_init in the function rxe_qp_init_req fails, both qp->req.task.func and qp->req.task.arg are not initialized. Because of creation of qp fails, the function rxe_create_qp will call rxe_qp_do_cleanup to handle allocated resource. Before calling __rxe_do_task, both qp->req.task.func and qp->req.task.arg should be checked.
Title RDMA/rxe: Fix "kernel NULL pointer dereference" error
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-09T01:29:22.950Z

Reserved: 2025-12-09T01:26:45.991Z

Link: CVE-2022-50671

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-09T16:17:19.227

Modified: 2025-12-09T18:37:13.640

Link: CVE-2022-50671

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-12-09T00:00:00Z

Links: CVE-2022-50671 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.