CVE-2022-48692

This is a vulnerability identified in the Linux kernel's RDMA (Remote Direct Memory Access) subsystem, specifically within the SCSI RDMA Protocol (SRP) driver. The issue arises from a NULL pointer dereference that can occur during certain operations, leading to potential system crashes or unexpected behavior.

This vulnerability is rated as a Moderate impact for Red Hat Enterprise Linux because triggering the flaw requires local privileges to interact with the RDMA subsystem, resulting in a kernel panic and denial of service rather than arbitrary code execution or privilege escalation. The issue is confined to the SCSI RDMA Protocol (SRP) initiator driver and cannot be reached on systems lacking RDMA-capable fabric configurations or SRP storage attachments. Environments that do not load the SRP driver or communicate with SRP targets remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.