{"id":"DEBIAN-CVE-2022-50885","details":"In the Linux kernel, the following vulnerability has been resolved:  RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed  There is a null-ptr-deref when mount.cifs over rdma:    BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanup+0x2f3/0x360 [rdma_rxe]   Read of size 8 at addr 0000000000000018 by task mount.cifs/3046    CPU: 2 PID: 3046 Comm: mount.cifs Not tainted 6.1.0-rc5+ #62   Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc3   Call Trace:    \u003cTASK\u003e    dump_stack_lvl+0x34/0x44    kasan_report+0xad/0x130    rxe_qp_do_cleanup+0x2f3/0x360 [rdma_rxe]    execute_in_process_context+0x25/0x90    __rxe_cleanup+0x101/0x1d0 [rdma_rxe]    rxe_create_qp+0x16a/0x180 [rdma_rxe]    create_qp.part.0+0x27d/0x340    ib_create_qp_kernel+0x73/0x160    rdma_create_qp+0x100/0x230    _smbd_get_connection+0x752/0x20f0    smbd_get_connection+0x21/0x40    cifs_get_tcp_session+0x8ef/0xda0    mount_get_conns+0x60/0x750    cifs_mount+0x103/0xd00    cifs_smb3_do_mount+0x1dd/0xcb0    smb3_get_tree+0x1d5/0x300    vfs_get_tree+0x41/0xf0    path_mount+0x9b3/0xdd0    __x64_sys_mount+0x190/0x1d0    do_syscall_64+0x35/0x80    entry_SYSCALL_64_after_hwframe+0x46/0xb0  The root cause of the issue is the socket create failed in rxe_qp_init_req().  So move the reset rxe_qp_do_cleanup() after the NULL ptr check.","modified":"2026-09-01T16:05:36.531615385Z","published":"2025-12-30T13:16:03.603Z","upstream":["CVE-2022-50885"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-50885"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50885.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50885.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50885.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}