Linux Kernel Vulnerability in RDMA/rxe Component by Linux Foundation

CVE-2022-50885

What is CVE-2022-50885?

In the Linux kernel, a vulnerability exists within the RDMA/rxe component that can lead to a NULL pointer dereference when socket creation fails during operations involving the CIFS mount. This flaw may cause a crash in the affected system, resulting from improper handling of cleanup procedures in the rxe_qp_do_cleanup() function. Remediation involves ensuring comprehensive NULL pointer checks are in place before cleanup is executed. Detailed fixes have been implemented to address this issue, improving the stability and security of the Linux kernel.

References