PT-2025-18642 · Linux+4 · Linux Kernel+4
Published
2023-05-09
·
Updated
2025-07-10
·
CVE-2022-49925
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A null-ptr-deref error was reported in the Linux kernel's RDMA/core. The issue occurs because the failure of
roce gid mgmt init() is ignored, leading to the destruction of an unallocated workqueue in ib core cleanup(). The error was identified by KASAN, which reported a null-ptr-deref in a specific range. The call trace indicates that the issue arises from the ib core init() function, where the failure of roce gid mgmt init() is not properly handled.Recommendations
To resolve this issue, catch the failure of
roce gid mgmt init() in ib core init() to prevent the destruction of an unallocated workqueue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Centos
Linux Kernel
Red Hat
Suse