CVE-2022-50135

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanup The function rxe_create_qp calls rxe_qp_from_init. If some error occurs, the error handler of function rxe_qp_from_init will set both scq and rcq to NULL. Then rxe_create_qp calls rxe_put to handle qp. In the end, rxe_qp_do_cleanup is called by rxe_put. rxe_qp_do_cleanup directly accesses scq and rcq before checking them. This will cause null-ptr-deref error. The call graph is as below: rxe_create_qp { ... rxe_qp_from_init { ... err1: ... qp->rcq = NULL; <---rcq is set to NULL qp->scq = NULL; <---scq is set to NULL ... } qp_init: rxe_put{ ... rxe_qp_do_cleanup { ... atomic_dec(&qp->scq->num_wq); <--- scq is accessed ... atomic_dec(&qp->rcq->num_wq); <--- rcq is accessed } }

• CWE-476

• https://git.kernel.org/stable/c/37da51efe6eaa0560f46803c8c436a48a2084da7Patch
• https://git.kernel.org/stable/c/8598b9d0a364c1663c96fc0fab9df0d36c809aeaPatch

Published

Jun 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-50129In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2022-50130In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50131In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2022-50132In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50133In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50134In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50136In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50137In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2022-50138In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50139In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50140In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-50141In the Linux kernel, the following vulnerability has been re…5.5