Linux Kernel Vulnerability in RDMA/rxe Component

CVE-2022-50543

What is CVE-2022-50543?

In the Linux kernel's RDMA/rxe component, a vulnerability exists that can result in a double free of the memory reference for mapping. This issue can occur when the rxe_mr_cleanup function is invoked while attempting to free the mapping during an error condition in the initialization process. If the memory resource (mr->map) is incorrectly managed, it may lead to potential system instability or crashes, affecting network communications. The defect originated from earlier changes aimed at fixing memory leaks in error paths but was not properly resolved. Subsequent patches have aimed to ensure that the memory cleanup process correctly handles resource allocation failures.

References