PT-2025-26053 · Linux+4 · Linux Kernel+4

Published 2022-07-31 · Updated 2025-09-12 · CVE-2022-50127

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the RDMA/rxe component. The issue occurs in the rxe create qp() function, where an error can happen before the spin locks are set up by rxe qp init req(). If this error occurs, the unwind process calls rxe cleanup(), leading to a potential crash when trying to access an uninitialized spin lock. The fix involves moving the spin lock initializations to an earlier point, before any potential failures.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Improper Initialization

Weakness Enumeration

CWE-908

CWE-665

Related Identifiers

BDU:2026-03263

CESA-2023_2951

CVE-2022-50127

OESA-2025-1820

RHSA-2023:2951

RHSA-2023:6583

RHSA-2023_2951

RHSA-2023_6583

SUSE-SU-2025:02264-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:03204-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02537-1

SUSE-SU-2025_03204-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 755

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50127.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50098 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50022 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49989 · Security Note
• https://git.kernel.org/stable/c/1a63f24e724f677db1ab21251f4d0011ae0bb5b5 · Patch
• https://git.kernel.org/stable/c/2ceeb04252e621c0b128ecc8fedbca922d11adba · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49986 · Security Note
• https://git.kernel.org/stable/c/db924bd8484c76558a4ac4c4b5aeb52e857f0341 · Patch
• https://osv.dev/vulnerability/CVE-2022-50127 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03204-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49881 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50087 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38024 · Security Note
• https://git.kernel.org/stable/c/3c838ca6fbdb173102780d7bdf18f2f7d9e30979 · Patch