CVE-2022-50137

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50137

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a window for use-after-free During a destroy CQ an interrupt may cause processing of a CQE after CQ resources are freed by irdma_cq_free_rsrc(). Fix this by moving the call to irdma_cq_free_rsrc() after the irdma_sc_cleanup_ceqes(), which is called under the cq_lock.

References
Link Resource
https://git.kernel.org/stable/c/0abf2eef80295923b819ce89ff9edc1fe61be17c Patch
https://git.kernel.org/stable/c/350ac793a03c8a30a3f2b27fc282cd1c67070763 Patch
https://git.kernel.org/stable/c/8ecef7890b3aea78c8bbb501a4b5b8134367b821 Patch
https://git.kernel.org/stable/c/92520864ef9f912f38b403d172a0ded020683d55 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Nov 2025, 18:07

Type Values Removed Values Added
CWE CWE-416
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/irdma: Se corrige una ventana para el Use-After-Free. Durante un CQ de destrucción, una interrupción puede provocar el procesamiento de un CQE después de que irdma_cq_free_rsrc() libere recursos CQ. Se soluciona este problema trasladando la llamada a irdma_cq_free_rsrc() después de irdma_sc_cleanup_ceqes(), que se ejecuta bajo cq_lock.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/0abf2eef80295923b819ce89ff9edc1fe61be17c - () https://git.kernel.org/stable/c/0abf2eef80295923b819ce89ff9edc1fe61be17c - Patch
References () https://git.kernel.org/stable/c/350ac793a03c8a30a3f2b27fc282cd1c67070763 - () https://git.kernel.org/stable/c/350ac793a03c8a30a3f2b27fc282cd1c67070763 - Patch
References () https://git.kernel.org/stable/c/8ecef7890b3aea78c8bbb501a4b5b8134367b821 - () https://git.kernel.org/stable/c/8ecef7890b3aea78c8bbb501a4b5b8134367b821 - Patch
References () https://git.kernel.org/stable/c/92520864ef9f912f38b403d172a0ded020683d55 - () https://git.kernel.org/stable/c/92520864ef9f912f38b403d172a0ded020683d55 - Patch

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-18 18:07

NVD link : CVE-2022-50137

Mitre link : CVE-2022-50137

CVE.ORG link : CVE-2022-50137

JSON object : View

Products Affected

linux

CWE
CWE-416

Use After Free