PT-2025-26062 · Linux+4 · Linux Kernel+4

Published 2022-07-14 · Updated 2025-07-28 · CVE-2022-50136

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the RDMA/siw component. The issue occurs when the siw recv mpa rr function returns -EAGAIN, indicating that the MPA reply has not been received completely, and yet the IW CM EVENT CONNECT REPLY event is reported. This can trigger a call trace in iw cm. The vulnerability can be triggered using the ib send lat command on both the server and client sides. The call trace may appear as a kernel bug, with an invalid opcode and a call trace involving the cm work handler and process one work functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-253

Related Identifiers

BDU:2026-03255

CESA-2023_2951

CVE-2022-50136

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:02264-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 607

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50136.json · Exploit
• https://git.kernel.org/stable/c/9ade92ddaf2347fb34298c02080caaa3cdd7c27b · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50136 · Vendor Advisory
• https://git.kernel.org/stable/c/f6e26e1a5f600b760dc32135d3fac846eabe09e7 · Patch
• https://git.kernel.org/stable/c/1434de50a5d9dab91c8ce031bc23b3e2178379c5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50136 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50136 · Security Note
• https://git.kernel.org/stable/c/3056fc6c32e613b760422b94c7617ac9a24a4721 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02308-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50136 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02320-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50136 · Vendor Advisory
• https://git.kernel.org/stable/c/11edf0bba15ea9df49478affec7974f351bb2f6e · Patch
• https://osv.dev/vulnerability/CVE-2022-50136 · Vendor Advisory