PT-2025-26063 · Linux+4 · Linux Kernel+4

Published 2022-07-05 · Updated 2025-07-28 · CVE-2022-50137

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the Linux kernel, specifically in the RDMA/irdma component. This issue occurs when an interrupt is processed after the CQ resources have been freed during the destruction of a CQ. The problem arises because the irdma cq free rsrc() function is called before irdma sc cleanup ceqes(), which is executed under the cq lock. To fix this, the call to irdma cq free rsrc() has been moved to after the irdma sc cleanup ceqes() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-826

CWE-416

Related Identifiers

BDU:2026-03254

CESA-2023_2951

CVE-2022-50137

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

RHSA-2025:19222

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02537-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 595

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50137.json · Exploit
• https://git.kernel.org/stable/c/0abf2eef80295923b819ce89ff9edc1fe61be17c · Patch
• https://bdu.fstec.ru/vul/2026-03254 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50137 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50137 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50137 · Vendor Advisory
• https://git.kernel.org/stable/c/350ac793a03c8a30a3f2b27fc282cd1c67070763 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50137 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50137 · Vendor Advisory
• https://git.kernel.org/stable/c/8ecef7890b3aea78c8bbb501a4b5b8134367b821 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50137 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50137 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://git.kernel.org/stable/c/92520864ef9f912f38b403d172a0ded020683d55 · Patch