CVE-2022-50543

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1-roce-flush+ #25

Description The Linux kernel contains a flaw in the RDMA/rxe subsystem related to double freeing of memory associated with memory registration (mr->map). Specifically, the rxe mr cleanup() function may attempt to free the mr->map structure multiple times when rxe mr init user() fails. This issue was initially addressed in commit b18c7da63fcb, then fixed in commit 8ff5f5d9d8cf, but the fix was subsequently reverted by commit 1e75550648da. The rxe mr cleanup() function now consistently handles freeing the mr->map once it has been successfully allocated.

Recommendations Update to a version of the Linux kernel that includes the fix for this issue.