CVE-2022-50885

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc5+

Description The Linux kernel contains a flaw in the RDMA/rxe module where a null pointer dereference can occur in the rxe qp do cleanup() function when socket creation fails. This issue arises due to the root cause being a socket creation failure within rxe qp init req(). The problem manifests as a null-ptr-deref during mount.cifs over RDMA, specifically when the mount.cifs process attempts to clean up a queue pair. The function rxe qp do cleanup() is called, leading to a read from an invalid memory address.

Recommendations Update to a version newer than 6.1.0-rc5+.