Back
CVE-2022-50127
RDMA/rxe: Fix error unwind in rxe_create_qp()
Medium5.5EPSS 0.19%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix error unwind in rxe_create_qp() In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like the spin locks are not setup until rxe_qp_init_req(). If an error occures before this point then the unwind will call rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task() which will oops when trying to access the uninitialized spinlock. Move the spinlock initializations earlier before any failures.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.19% · top 91% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < 3c838ca6fbdb173102780d7bdf18f2f7d9e30979
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < 1a63f24e724f677db1ab21251f4d0011ae0bb5b5
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < b348e204a53103f51070513a7494da7c62ecbdaa
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < 3ef491b26c720a87fcfbd78b7dc8eb83d9753fe6
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < 2ceeb04252e621c0b128ecc8fedbca922d11adba
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < db924bd8484c76558a4ac4c4b5aeb52e857f0341
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < f05b7cf02123aaf99db78abfe638efefdbe15555
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < fd5382c5805c4bcb50fd25b7246247d3f7114733
- affected 4.8
- unaffected < 4.8
- unaffected 4.14.291 – ≤ 4.14.*
- unaffected 4.19.256 – ≤ 4.19.*
- unaffected 5.4.211 – ≤ 5.4.*
- unaffected 5.10.137 – ≤ 5.10.*
- unaffected 5.15.61 – ≤ 5.15.*
- unaffected 5.18.18 – ≤ 5.18.*
- unaffected 5.19.2 – ≤ 5.19.*
- unaffected 6.0 – ≤ *
References (8)
- https://git.kernel.org/stable/c/3c838ca6fbdb173102780d7bdf18f2f7d9e30979 (opens in a new tab)
- https://git.kernel.org/stable/c/1a63f24e724f677db1ab21251f4d0011ae0bb5b5 (opens in a new tab)
- https://git.kernel.org/stable/c/b348e204a53103f51070513a7494da7c62ecbdaa (opens in a new tab)
- https://git.kernel.org/stable/c/3ef491b26c720a87fcfbd78b7dc8eb83d9753fe6 (opens in a new tab)
- https://git.kernel.org/stable/c/2ceeb04252e621c0b128ecc8fedbca922d11adba (opens in a new tab)
- https://git.kernel.org/stable/c/db924bd8484c76558a4ac4c4b5aeb52e857f0341 (opens in a new tab)
- https://git.kernel.org/stable/c/f05b7cf02123aaf99db78abfe638efefdbe15555 (opens in a new tab)
- https://git.kernel.org/stable/c/fd5382c5805c4bcb50fd25b7246247d3f7114733 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-50127)Record last updated .