|
Vulnerabilities
< Back

CVE-2022-50543

Updated on 07 Oct 2025

Severity

7.8 High severity

Details

CVSS score
7.8
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix mr->map double free

rxe_mr_cleanup() which tries to free mr->map again will be called when rxe_mr_init_user() fails:

CPU: 0 PID: 4917 Comm: rdma_flush_serv Kdump: loaded Not tainted 6.1.0-rc1-roce-flush+ #25 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x45/0x5d panic+0x19e/0x349 end_report.part.0+0x54/0x7c kasan_report.cold+0xa/0xf rxe_mr_cleanup+0x9d/0xf0 [rdma_rxe] __rxe_cleanup+0x10a/0x1e0 [rdma_rxe] rxe_reg_user_mr+0xb7/0xd0 [rdma_rxe] ib_uverbs_reg_mr+0x26a/0x480 [ib_uverbs] ib_uverbs_handler_UVERBS_METHOD_INVOKE_WRITE+0x1a2/0x250 [ib_uverbs] ib_uverbs_cmd_verbs+0x1397/0x15a0 [ib_uverbs]

This issue was firstly exposed since commit b18c7da63fcb (“RDMA/rxe: Fix memory leak in error path code”) and then we fixed it in commit 8ff5f5d9d8cf (“RDMA/rxe: Prevent double freeing rxe_map_set()”) but this fix was reverted together at last by commit 1e75550648da (Revert “RDMA/rxe: Create duplicate mapping tables for FMRs”)

Simply let rxe_mr_cleanup() always handle freeing the mr->map once it is successfully allocated.

Details

Affected product:
AlmaLinux 9.2 ESU , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , TuxCare 9.6 ESU
Affected packages:
kernel @ 4.18.0 (+4 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 8 Released
59 kernels
  • 4.18.0-477.10.1.el8_8
  • 4.18.0-477.13.1.el8_8
  • 4.18.0-477.15.1.el8_8
  • 4.18.0-477.21.1.el8_8
  • 4.18.0-477.27.1.el8_8
  • 4.18.0-513.5.1.el8_9
  • 4.18.0-513.9.1.el8_9
  • 4.18.0-477.27.2.el8_8
  • 4.18.0-513.11.1.el8_9
  • 4.18.0-513.18.1.el8_9
  • 4.18.0-513.24.1.el8_9
  • 4.18.0-513.18.2.el8_9
  • 4.18.0-553.el8_10
  • 4.18.0-553.5.1.el8_10
  • 4.18.0-553.8.1.el8_10
  • 4.18.0-553.16.1.el8_10
  • 4.18.0-553.22.1.el8_10
  • 4.18.0-553.27.1.el8_10
  • 4.18.0-553.30.1.el8_10
  • 4.18.0-553.32.1.el8_10
  • 4.18.0-553.34.1.el8_10
  • 4.18.0-553.33.1.el8_10
  • 4.18.0-553.37.1.el8_10
  • 4.18.0-553.40.1.el8_10
  • 4.18.0-553.36.1.el8_10
  • 4.18.0-553.44.1.el8_10
  • 4.18.0-553.45.1.el8_10
  • 4.18.0-553.46.1.el8_10
  • 4.18.0-553.42.1.el8_10
  • 4.18.0-553.50.1.el8_10
  • 4.18.0-553.47.1.el8_10
  • 4.18.0-553.52.1.el8_10
  • 4.18.0-553.53.1.el8_10
  • 4.18.0-553.51.1.el8_10
  • 4.18.0-553.54.1.el8_10
  • 4.18.0-553.56.1.el8_10
  • 4.18.0-553.58.1.el8_10
  • 4.18.0-553.60.1.el8_10
  • 4.18.0-553.62.1.el8_10
  • 4.18.0-553.63.1.el8_10
  • 4.18.0-553.64.1.el8_10
  • 4.18.0-553.66.1.el8_10
  • 4.18.0-553.69.1.el8_10
  • 4.18.0-553.70.1.el8_10
  • 4.18.0-553.71.1.el8_10
  • 4.18.0-553.72.1.el8_10
  • 4.18.0-553.74.1.el8_10
  • 4.18.0-553.75.1.el8_10
  • 4.18.0-553.76.1.el8_10
  • 4.18.0-553.77.1.el8_10
  • 4.18.0-553.78.1.el8_10
  • 4.18.0-553.79.1.el8_10
  • 4.18.0-553.80.1.el8_10
  • 4.18.0-553.81.1.el8_10
  • 4.18.0-553.82.1.el8_10
  • 4.18.0-553.83.1.el8_10
  • 4.18.0-553.84.1.el8_10
  • 4.18.0-553.85.1.el8_10
  • 4.18.0-553.87.1.el8_10
AlmaLinux 9.2 ESU Released
10 kernels
  • 5.14.0-284.1101.el9_2.tuxcare.7.els20
  • 5.14.0-284.1101.el9_2.tuxcare.7.els21
  • 5.14.0-284.1101.el9_2.tuxcare.7.els23
  • 5.14.0-284.1101.el9_2.tuxcare.7.els22
  • 5.14.0-284.1101.el9_2.tuxcare.7.els14
  • 5.14.0-284.1101.el9_2.tuxcare.7.els18
  • 5.14.0-284.1101.el9_2.tuxcare.7.els16
  • 5.14.0-284.1101.el9_2.tuxcare.7.els15
  • 5.14.0-284.1101.el9_2.tuxcare.7.els17
  • 5.14.0-284.1101.el9_2.tuxcare.7.els19
CloudLinux OS 7h Released
58 kernels
  • 4.18.0-477.10.1.lve.1.el7h
  • 4.18.0-477.13.1.lve.el7h
  • 4.18.0-477.15.1.lve.1.el7h
  • 4.18.0-477.21.1.lve.el7h
  • 4.18.0-477.13.1.lve.1.el7h
  • 4.18.0-477.27.1.lve.el7h
  • 4.18.0-477.15.1.lve.2.el7h
  • 4.18.0-477.21.1.lve.1.el7h
  • 4.18.0-513.5.1.lve.el7h
  • 4.18.0-477.27.2.lve.el7h
  • 4.18.0-513.9.1.lve.el7h
  • 4.18.0-513.11.1.lve.el7h
  • 4.18.0-513.18.1.lve.el7h
  • 4.18.0-513.11.1.lve.1.el7h
  • 4.18.0-513.18.1.lve.2.el7h
  • 4.18.0-513.18.1.lve.1.el7h
  • 4.18.0-513.24.1.lve.el7h
  • 4.18.0-553.lve.el7h
  • 4.18.0-513.24.1.lve.1.el7h
  • 4.18.0-513.24.1.lve.2.el7h
  • 4.18.0-553.5.1.lve.el7h
  • 4.18.0-553.8.1.lve.el7h
  • 4.18.0-553.5.1.lve.1.el7h
  • 4.18.0-553.16.1.lve.el7h
  • 4.18.0-553.22.1.lve.el7h
  • 4.18.0-553.16.1.lve.1.el7h
  • 4.18.0-553.27.1.lve.el7h
  • 4.18.0-553.22.1.lve.1.el7h
  • 4.18.0-553.30.1.lve.el7h
  • 4.18.0-553.32.1.lve.el7h
  • 4.18.0-553.27.1.lve.1.el7h
  • 4.18.0-553.34.1.lve.el7h
  • 4.18.0-553.33.1.lve.el7h
  • 4.18.0-553.37.1.lve.el7h
  • 4.18.0-553.40.1.lve.el7h
  • 4.18.0-553.36.1.lve.el7h
  • 4.18.0-553.44.1.lve.el7h
  • 4.18.0-553.45.1.lve.el7h
  • 4.18.0-553.46.1.lve.el7h
  • 4.18.0-553.50.1.lve.el7h
  • 4.18.0-553.47.1.lve.el7h
  • 4.18.0-553.52.1.lve.el7h
  • 4.18.0-553.51.1.lve.1.el7h
  • 4.18.0-553.51.1.lve.el7h
  • 4.18.0-553.53.1.lve.el7h
  • 4.18.0-553.54.1.lve.el7h
  • 4.18.0-553.56.1.lve.el7h
  • 4.18.0-553.58.1.lve.el7h
  • 4.18.0-553.62.1.lve.el7h
  • 4.18.0-553.69.1.lve.el7h
  • 4.18.0-553.70.1.lve.el7h
  • 4.18.0-553.74.1.lve.el7h
  • 4.18.0-553.75.1.lve.el7h
  • 4.18.0-553.76.1.lve.el7h
  • 4.18.0-553.77.1.lve.el7h
  • 4.18.0-553.79.1.lve.el7h
  • 4.18.0-553.83.1.lve.el7h
  • 4.18.0-553.84.1.lve.el7h
CloudLinux OS 8 Released
58 kernels
  • 4.18.0-477.10.1.lve.el8
  • 4.18.0-477.13.1.lve.el8
  • 4.18.0-477.15.1.lve.2.el8
  • 4.18.0-477.13.1.lve.1.el8
  • 4.18.0-477.21.1.lve.el8
  • 4.18.0-477.21.1.lve.1.el8
  • 4.18.0-477.27.1.lve.el8
  • 4.18.0-477.27.2.lve.el8
  • 4.18.0-513.5.1.lve.el8
  • 4.18.0-513.9.1.lve.el8
  • 4.18.0-513.11.1.lve.el8
  • 4.18.0-513.18.1.lve.el8
  • 4.18.0-513.18.1.lve.2.el8
  • 4.18.0-513.18.1.lve.1.el8
  • 4.18.0-513.24.1.lve.el8
  • 4.18.0-513.24.1.lve.1.el8
  • 4.18.0-553.lve.el8
  • 4.18.0-513.24.1.lve.2.el8
  • 4.18.0-553.5.1.lve.el8
  • 4.18.0-544.lve.el8
  • 4.18.0-553.5.1.lve.1.el8
  • 4.18.0-553.8.1.lve.el8
  • 4.18.0-553.16.1.lve.el8
  • 4.18.0-553.16.1.lve.1.el8
  • 4.18.0-553.22.1.lve.el8
  • 4.18.0-553.22.1.lve.1.el8
  • 4.18.0-553.27.1.lve.el8
  • 4.18.0-553.30.1.lve.el8
  • 4.18.0-553.27.1.lve.1.el8
  • 4.18.0-553.32.1.lve.el8
  • 4.18.0-553.34.1.lve.el8
  • 4.18.0-553.33.1.lve.el8
  • 4.18.0-553.37.1.lve.el8
  • 4.18.0-553.40.1.lve.el8
  • 4.18.0-553.44.1.lve.el8
  • 4.18.0-553.36.1.lve.el8
  • 4.18.0-553.45.1.lve.el8
  • 4.18.0-553.46.1.lve.el8
  • 4.18.0-553.50.1.lve.el8
  • 4.18.0-553.47.1.lve.el8
  • 4.18.0-553.51.1.lve.el8
  • 4.18.0-553.51.1.lve.1.el8
  • 4.18.0-553.52.1.lve.el8
  • 4.18.0-553.53.1.lve.el8
  • 4.18.0-553.54.1.lve.el8
  • 4.18.0-553.58.1.lve.el8
  • 4.18.0-553.62.1.lve.el8
  • 4.18.0-553.56.1.lve.el8
  • 4.18.0-553.69.1.lve.el8
  • 4.18.0-553.70.1.lve.el8
  • 4.18.0-553.74.1.lve.el8
  • 4.18.0-553.75.1.lve.el8
  • 4.18.0-553.76.1.lve.el8
  • 4.18.0-553.77.1.lve.el8
  • 4.18.0-553.79.1.lve.el8
  • 4.18.0-553.80.1.lve.el8
  • 4.18.0-553.83.1.lve.el8
  • 4.18.0-553.84.1.lve.el8
Oracle Linux 8 Released
62 kernels
  • 4.18.0-477.10.1.el8_8
  • 4.18.0-477.13.1.el8_8
  • 4.18.0-477.15.1.el8_8
  • 4.18.0-477.21.1.el8_8
  • 4.18.0-477.27.0.1.el8_8
  • 4.18.0-477.27.1.el8_8
  • 4.18.0-513.5.1.el8_9
  • 4.18.0-513.9.1.el8_9
  • 4.18.0-513.11.0.1.el8_9
  • 4.18.0-513.18.0.1.el8_9
  • 4.18.0-513.18.0.2.el8_9
  • 4.18.0-513.18.1.el8_9
  • 4.18.0-513.18.1.0.1.el8_9
  • 4.18.0-513.24.1.el8_9
  • 4.18.0-553.el8_10
  • 4.18.0-553.5.1.el8_10
  • 4.18.0-553.8.1.el8_10
  • 4.18.0-553.16.1.el8_10
  • 4.18.0-553.22.1.el8_10
  • 4.18.0-553.27.1.el8_10
  • 4.18.0-553.30.1.el8_10
  • 4.18.0-553.32.1.el8_10
  • 4.18.0-553.33.1.el8_10
  • 4.18.0-553.34.1.el8_10
  • 4.18.0-553.36.1.el8_10
  • 4.18.0-553.37.1.el8_10
  • 4.18.0-553.40.1.el8_10
  • 4.18.0-553.44.1.el8_10
  • 4.18.0-553.45.1.el8_10
  • 4.18.0-553.42.1.el8_10
  • 4.18.0-553.46.1.el8_10
  • 4.18.0-553.47.1.el8_10
  • 4.18.0-553.50.1.el8_10
  • 4.18.0-553.51.1.el8_10
  • 4.18.0-553.52.1.el8_10
  • 4.18.0-553.53.1.el8_10
  • 4.18.0-553.54.1.el8_10
  • 4.18.0-553.56.1.el8_10
  • 4.18.0-553.58.1.el8_10
  • 4.18.0-553.60.1.el8_10
  • 4.18.0-553.62.1.el8_10
  • 4.18.0-553.63.1.el8_10
  • 4.18.0-553.64.1.el8_10
  • 4.18.0-553.66.1.el8_10
  • 4.18.0-553.69.1.el8_10
  • 4.18.0-553.70.1.el8_10
  • 4.18.0-553.71.1.el8_10
  • 4.18.0-553.72.1.el8_10
  • 4.18.0-553.74.1.el8_10
  • 4.18.0-553.74.1.0.1.el8_10
  • 4.18.0-553.75.1.el8_10
  • 4.18.0-553.76.1.el8_10
  • 4.18.0-553.77.1.el8_10
  • 4.18.0-553.78.1.el8_10
  • 4.18.0-553.79.1.el8_10
  • 4.18.0-553.80.1.el8_10
  • 4.18.0-553.81.1.el8_10
  • 4.18.0-553.82.1.el8_10
  • 4.18.0-553.83.1.el8_10
  • 4.18.0-553.84.1.el8_10
  • 4.18.0-553.85.1.el8_10
  • 4.18.0-553.87.1.el8_10
RHEL 8 Released
57 kernels
  • 4.18.0-477.10.1.el8_8
  • 4.18.0-477.13.1.el8_8
  • 4.18.0-477.15.1.el8_8
  • 4.18.0-477.21.1.el8_8
  • 4.18.0-477.27.1.el8_8
  • 4.18.0-513.5.1.el8_9
  • 4.18.0-513.9.1.el8_9
  • 4.18.0-513.11.1.el8_9
  • 4.18.0-513.18.1.el8_9
  • 4.18.0-513.24.1.el8_9
  • 4.18.0-553.el8_10
  • 4.18.0-553.5.1.el8_10
  • 4.18.0-553.8.1.el8_10
  • 4.18.0-553.16.1.el8_10
  • 4.18.0-553.22.1.el8_10
  • 4.18.0-553.27.1.el8_10
  • 4.18.0-553.30.1.el8_10
  • 4.18.0-553.32.1.el8_10
  • 4.18.0-553.33.1.el8_10
  • 4.18.0-553.34.1.el8_10
  • 4.18.0-553.36.1.el8_10
  • 4.18.0-553.37.1.el8_10
  • 4.18.0-553.40.1.el8_10
  • 4.18.0-553.42.1.el8_10
  • 4.18.0-553.44.1.el8_10
  • 4.18.0-553.45.1.el8_10
  • 4.18.0-553.46.1.el8_10
  • 4.18.0-553.47.1.el8_10
  • 4.18.0-553.50.1.el8_10
  • 4.18.0-553.51.1.el8_10
  • 4.18.0-553.52.1.el8_10
  • 4.18.0-553.53.1.el8_10
  • 4.18.0-553.54.1.el8_10
  • 4.18.0-553.56.1.el8_10
  • 4.18.0-553.58.1.el8_10
  • 4.18.0-553.60.1.el8_10
  • 4.18.0-553.62.1.el8_10
  • 4.18.0-553.63.1.el8_10
  • 4.18.0-553.64.1.el8_10
  • 4.18.0-553.66.1.el8_10
  • 4.18.0-553.69.1.el8_10
  • 4.18.0-553.70.1.el8_10
  • 4.18.0-553.71.1.el8_10
  • 4.18.0-553.72.1.el8_10
  • 4.18.0-553.74.1.el8_10
  • 4.18.0-553.75.1.el8_10
  • 4.18.0-553.76.1.el8_10
  • 4.18.0-553.77.1.el8_10
  • 4.18.0-553.78.1.el8_10
  • 4.18.0-553.79.1.el8_10
  • 4.18.0-553.80.1.el8_10
  • 4.18.0-553.81.1.el8_10
  • 4.18.0-553.82.1.el8_10
  • 4.18.0-553.83.1.el8_10
  • 4.18.0-553.84.1.el8_10
  • 4.18.0-553.85.1.el8_10
  • 4.18.0-553.87.1.el8_10
RHEL8 EUS 8.6 Released
56 kernels
  • 4.18.0-372.51.1.el8_6
  • 4.18.0-372.46.1.el8_6
  • 4.18.0-372.41.1.el8_6
  • 4.18.0-372.36.1.el8_6
  • 4.18.0-372.52.1.el8_6
  • 4.18.0-372.57.1.el8_6
  • 4.18.0-372.64.1.el8_6
  • 4.18.0-372.70.1.el8_6
  • 4.18.0-372.75.1.el8_6
  • 4.18.0-372.80.1.el8_6
  • 4.18.0-372.87.1.el8_6
  • 4.18.0-372.91.1.el8_6
  • 4.18.0-372.93.1.el8_6
  • 4.18.0-372.95.1.el8_6
  • 4.18.0-372.98.1.el8_6
  • 4.18.0-372.100.1.el8_6
  • 4.18.0-372.102.1.el8_6
  • 4.18.0-372.105.1.el8_6
  • 4.18.0-372.107.1.el8_6
  • 4.18.0-372.111.1.el8_6
  • 4.18.0-372.118.1.el8_6
  • 4.18.0-372.119.1.el8_6
  • 4.18.0-372.113.1.el8_6
  • 4.18.0-372.109.1.el8_6
  • 4.18.0-372.115.1.el8_6
  • 4.18.0-372.121.1.el8_6
  • 4.18.0-372.123.1.el8_6
  • 4.18.0-372.124.1.el8_6
  • 4.18.0-372.125.1.el8_6
  • 4.18.0-372.126.1.el8_6
  • 4.18.0-372.127.1.el8_6
  • 4.18.0-372.129.1.el8_6
  • 4.18.0-372.131.1.el8_6
  • 4.18.0-372.133.1.el8_6
  • 4.18.0-372.134.1.el8_6
  • 4.18.0-372.137.1.el8_6
  • 4.18.0-372.139.1.el8_6
  • 4.18.0-372.141.1.el8_6
  • 4.18.0-372.142.1.el8_6
  • 4.18.0-372.143.1.el8_6
  • 4.18.0-372.145.1.el8_6
  • 4.18.0-372.149.1.el8_6
  • 4.18.0-372.150.1.el8_6
  • 4.18.0-372.151.1.el8_6
  • 4.18.0-372.153.1.el8_6
  • 4.18.0-372.155.1.el8_6
  • 4.18.0-372.157.1.el8_6
  • 4.18.0-372.158.1.el8_6
  • 4.18.0-372.160.1.el8_6
  • 4.18.0-372.162.1.el8_6
  • 4.18.0-372.164.1.el8_6
  • 4.18.0-372.166.1.el8_6
  • 4.18.0-372.168.1.el8_6
  • 4.18.0-372.170.1.el8_6
  • 4.18.0-372.172.1.el8_6
  • 4.18.0-372.173.1.el8_6
RHEL 9 Will Not Fix —
Rocky Linux 8 Released
50 kernels
  • 4.18.0-477.10.1.el8_8
  • 4.18.0-477.13.1.el8_8
  • 4.18.0-477.15.1.el8_8
  • 4.18.0-477.27.1.el8_8
  • 4.18.0-477.21.1.el8_8
  • 4.18.0-513.5.1.el8_9
  • 4.18.0-513.9.1.el8_9
  • 4.18.0-513.11.1.el8_9
  • 4.18.0-513.18.1.el8_9
  • 4.18.0-513.11.1.el8_9.0.1
  • 4.18.0-513.24.1.el8_9
  • 4.18.0-553.el8_10
  • 4.18.0-553.5.1.el8_10
  • 4.18.0-553.8.1.el8_10
  • 4.18.0-553.16.1.el8_10
  • 4.18.0-553.22.1.el8_10
  • 4.18.0-553.27.1.el8_10
  • 4.18.0-553.30.1.el8_10
  • 4.18.0-553.32.1.el8_10
  • 4.18.0-553.34.1.el8_10
  • 4.18.0-553.33.1.el8_10
  • 4.18.0-553.37.1.el8_10
  • 4.18.0-553.40.1.el8_10
  • 4.18.0-553.36.1.el8_10
  • 4.18.0-553.44.1.el8_10
  • 4.18.0-553.45.1.el8_10
  • 4.18.0-553.46.1.el8_10
  • 4.18.0-553.42.1.el8_10
  • 4.18.0-553.50.1.el8_10
  • 4.18.0-553.47.1.el8_10
  • 4.18.0-553.51.1.el8_10
  • 4.18.0-553.53.1.el8_10
  • 4.18.0-553.54.1.el8_10
  • 4.18.0-553.56.1.el8_10
  • 4.18.0-553.58.1.el8_10
  • 4.18.0-553.62.1.el8_10
  • 4.18.0-553.63.1.el8_10
  • 4.18.0-553.64.1.el8_10
  • 4.18.0-553.66.1.el8_10
  • 4.18.0-553.69.1.el8_10
  • 4.18.0-553.72.1.el8_10
  • 4.18.0-553.74.1.el8_10
  • 4.18.0-553.76.1.el8_10
  • 4.18.0-553.77.1.el8_10
  • 4.18.0-553.79.1.el8_10
  • 4.18.0-553.80.1.el8_10
  • 4.18.0-553.81.1.el8_10
  • 4.18.0-553.83.1.el8_10
  • 4.18.0-553.85.1.el8_10
  • 4.18.0-553.87.1.el8_10