CVE-2022-50671: Linux

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix "kernel NULL pointer dereference" error When rxe_queue_init in the function rxe_qp_init_req fails, both qp->req.task.func and qp->req.task.arg are not initialized. Because of creation of qp fails, the function rxe_create_qp will call rxe_qp_do_cleanup to handle allocated resource. Before calling __rxe_do_task, both qp->req.task.func and qp->req.task.arg should be checked.

Affected products

• Linux Linux: from 4.8, before 4.9.331 (fixed in 4.9.331); from 4.10, before 4.14.296 (fixed in 4.14.296); from 4.15, before 4.19.262 (fixed in 4.19.262); from 4.20, before 5.4.220 (fixed in 5.4.220); from 5.5, before 5.10.150 (fixed in 5.10.150); from 5.11, before 5.15.75 (fixed in 5.15.75); …

Published 2025-12-09. Last modified 2026-08-04.