CVE-2022-50137

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Fix a window for use-after-free

During a destroy CQ an interrupt may cause processing of a CQE after CQ resources are freed by irdma_cq_free_rsrc(). Fix this by moving the call to irdma_cq_free_rsrc() after the irdma_sc_cleanup_ceqes(), which is called under the cq_lock.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires local access with privileges to interact with RDMA interfaces on systems equipped with supported Intel RDMA hardware, alongside winning a narrow race condition. In typical deployments, the irdma driver is only engaged when compatible Intel network adapters are physically present and actively executing RDMA completion queue operations. The flaw stems from an asynchronous interrupt processing event during completion queue destruction that can trigger a use-after-free state. Successful exploitation could allow a local attacker to cause a system crash or potentially escalate privileges, though the strict timing and hardware requirements significantly limit overall risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.