Skip to content
Heist/ feed
Back to feed
UnratedFix available

RDMA/rxe: Fix error unwind in rxe_create_qp()

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix error unwind in rxe_create_qp() In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like the spin locks are not setup until rxe_qp_init_req(). If an error occures before this point then the unwind will call rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task() which will oops when trying to access the uninitialized spinlock. Move the spinlock initializations earlier before any failures.

Products
Kernel
Affected versions
Not specified
Fixed versions
4.14.291, 4.19.256, 5.10.137, 5.15.61, 5.18.18, 5.19.2, 5.4.211
CVEs
CVE-2022-50127
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 02:02 UTC · Revision 1

Source evidence

RDMA/rxe: Fix error unwind in rxe_create_qp()

core-osv · Original source

Published 18 Jun 2025, 11:02 UTC

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix error unwind in rxe_create_qp() In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like the spin locks are not setup until rxe_qp_init_req(). If an error occures before this point then the unwind will call rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task() which will oops when trying to access the uninitialized spinlock. Move the spinlock initializations earlier before any failures.

osv:CVE-2022-50127

Kernel

Fixed versions: 4.14.291, 4.19.256, 5.4.211, 5.10.137, 5.15.61, 5.18.18, 5.19.2

Complete source record
{
  "id": "92ef72707f35e93f7e8860ac1c8ca16f778a2c97cf05d334f27539f4d03a4e70",
  "url": "https://osv.dev/vulnerability/CVE-2022-50127",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "RDMA/rxe: Fix error unwind in rxe_create_qp()",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix error unwind in rxe_create_qp() In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like the spin locks are not setup until rxe_qp_init_req(). If an error occures before this point then the unwind will call rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task() which will oops when trying to access the uninitialized spinlock. Move the spinlock initializations earlier before any failures.",
    "evidence": "osv:CVE-2022-50127",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.14.291",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "4.19.256",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.4.211",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.10.137",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.61",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.18.18",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.19.2",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2022-50127",
      "aliases": [
        "CVE-2022-50127"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "8700e3e7c4857d28ebaa824509934556da0b3e76"
                },
                {
                  "fixed": "3c838ca6fbdb173102780d7bdf18f2f7d9e30979"
                },
                {
                  "fixed": "1a63f24e724f677db1ab21251f4d0011ae0bb5b5"
                },
                {
                  "fixed": "b348e204a53103f51070513a7494da7c62ecbdaa"
                },
                {
                  "fixed": "3ef491b26c720a87fcfbd78b7dc8eb83d9753fe6"
                },
                {
                  "fixed": "2ceeb04252e621c0b128ecc8fedbca922d11adba"
                },
                {
                  "fixed": "db924bd8484c76558a4ac4c4b5aeb52e857f0341"
                },
                {
                  "fixed": "f05b7cf02123aaf99db78abfe638efefdbe15555"
                },
                {
                  "fixed": "fd5382c5805c4bcb50fd25b7246247d3f7114733"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50127.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.8.0"
                },
                {
                  "fixed": "4.14.291"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.15.0"
                },
                {
                  "fixed": "4.19.256"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.20.0"
                },
                {
                  "fixed": "5.4.211"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.5.0"
                },
                {
                  "fixed": "5.10.137"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "5.15.61"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "5.18.18"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.19.0"
                },
                {
                  "fixed": "5.19.2"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50127.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:25.445712924Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/1a63f24e724f677db1ab21251f4d0011ae0bb5b5",
        "https://git.kernel.org/stable/c/2ceeb04252e621c0b128ecc8fedbca922d11adba",
        "https://git.kernel.org/stable/c/3c838ca6fbdb173102780d7bdf18f2f7d9e30979",
        "https://git.kernel.org/stable/c/3ef491b26c720a87fcfbd78b7dc8eb83d9753fe6",
        "https://git.kernel.org/stable/c/b348e204a53103f51070513a7494da7c62ecbdaa",
        "https://git.kernel.org/stable/c/db924bd8484c76558a4ac4c4b5aeb52e857f0341",
        "https://git.kernel.org/stable/c/f05b7cf02123aaf99db78abfe638efefdbe15555",
        "https://git.kernel.org/stable/c/fd5382c5805c4bcb50fd25b7246247d3f7114733",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50127.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-50127",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50127.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2022-50127",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 491753,
  "published_at": "2025-06-18T11:02:54.332+00:00"
}