CVE-2022-50356

A null pointer dereference exists in the linux kernel, such that when sfb_init() fails qdisc is NULL, and it will cause gpf issue, leading to damage to the availability of the system.

This vulnerability is rated Moderate rather than Low because a local user with privileges to manage network queuing disciplines (such as within a container namespace with CAP_NET_ADMIN) can trigger a kernel panic, resulting in a denial of service. The Stochastic Fair Blue (SFB) scheduler is not configured as the default queuing discipline in standard Red Hat Enterprise Linux installations, which restricts exposure to non-standard traffic control setups. The flaw cannot be exploited remotely and does not compromise system confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.