GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-50136 (GCVE-0-2022-50136)

Vulnerability from cvelistv5 – Published: 2025-06-18 11:03 – Updated: 2026-08-05 08:57
VLAI
Title
RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event
Summary
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event If siw_recv_mpa_rr returns -EAGAIN, it means that the MPA reply hasn't been received completely, and should not report IW_CM_EVENT_CONNECT_REPLY in this case. This may trigger a call trace in iw_cm. A simple way to trigger this: server: ib_send_lat client: ib_send_lat -R <server_ip> The call trace looks like this: kernel BUG at drivers/infiniband/core/iwcm.c:894! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI <...> Workqueue: iw_cm_wq cm_work_handler [iw_cm] Call Trace: <TASK> cm_work_handler+0x1dd/0x370 [iw_cm] process_one_work+0x1e2/0x3b0 worker_thread+0x49/0x2e0 ? rescuer_thread+0x370/0x370 kthread+0xe5/0x110 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 </TASK>
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 6c52fdc244b5ccc468006fd65a504d4ee33743c7 , < 11edf0bba15ea9df49478affec7974f351bb2f6e (git)
Affected: 6c52fdc244b5ccc468006fd65a504d4ee33743c7 , < 9ade92ddaf2347fb34298c02080caaa3cdd7c27b (git)
Affected: 6c52fdc244b5ccc468006fd65a504d4ee33743c7 , < f6e26e1a5f600b760dc32135d3fac846eabe09e7 (git)
Affected: 6c52fdc244b5ccc468006fd65a504d4ee33743c7 , < 0066246d2d7e2619f3ecf3cf07333c59e6e7d84d (git)
Affected: 6c52fdc244b5ccc468006fd65a504d4ee33743c7 , < 1434de50a5d9dab91c8ce031bc23b3e2178379c5 (git)
Affected: 6c52fdc244b5ccc468006fd65a504d4ee33743c7 , < 3056fc6c32e613b760422b94c7617ac9a24a4721 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.3
Unaffected: 0 , < 5.3 (semver)
Unaffected: 5.4.211 , ≤ 5.4.* (semver)
Unaffected: 5.10.137 , ≤ 5.10.* (semver)
Unaffected: 5.15.61 , ≤ 5.15.* (semver)
Unaffected: 5.18.18 , ≤ 5.18.* (semver)
Unaffected: 5.19.2 , ≤ 5.19.* (semver)
Unaffected: 6.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/sw/siw/siw_cm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "11edf0bba15ea9df49478affec7974f351bb2f6e",
              "status": "affected",
              "version": "6c52fdc244b5ccc468006fd65a504d4ee33743c7",
              "versionType": "git"
            },
            {
              "lessThan": "9ade92ddaf2347fb34298c02080caaa3cdd7c27b",
              "status": "affected",
              "version": "6c52fdc244b5ccc468006fd65a504d4ee33743c7",
              "versionType": "git"
            },
            {
              "lessThan": "f6e26e1a5f600b760dc32135d3fac846eabe09e7",
              "status": "affected",
              "version": "6c52fdc244b5ccc468006fd65a504d4ee33743c7",
              "versionType": "git"
            },
            {
              "lessThan": "0066246d2d7e2619f3ecf3cf07333c59e6e7d84d",
              "status": "affected",
              "version": "6c52fdc244b5ccc468006fd65a504d4ee33743c7",
              "versionType": "git"
            },
            {
              "lessThan": "1434de50a5d9dab91c8ce031bc23b3e2178379c5",
              "status": "affected",
              "version": "6c52fdc244b5ccc468006fd65a504d4ee33743c7",
              "versionType": "git"
            },
            {
              "lessThan": "3056fc6c32e613b760422b94c7617ac9a24a4721",
              "status": "affected",
              "version": "6c52fdc244b5ccc468006fd65a504d4ee33743c7",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/sw/siw/siw_cm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.3"
            },
            {
              "lessThan": "5.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.211",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.137",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.61",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.18",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.19.*",
              "status": "unaffected",
              "version": "5.19.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.211",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.137",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.61",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.18",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19.2",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event\n\nIf siw_recv_mpa_rr returns -EAGAIN, it means that the MPA reply hasn\u0027t\nbeen received completely, and should not report IW_CM_EVENT_CONNECT_REPLY\nin this case. This may trigger a call trace in iw_cm. A simple way to\ntrigger this:\n server: ib_send_lat\n client: ib_send_lat -R \u003cserver_ip\u003e\n\nThe call trace looks like this:\n\n kernel BUG at drivers/infiniband/core/iwcm.c:894!\n invalid opcode: 0000 [#1] PREEMPT SMP NOPTI\n \u003c...\u003e\n Workqueue: iw_cm_wq cm_work_handler [iw_cm]\n Call Trace:\n  \u003cTASK\u003e\n  cm_work_handler+0x1dd/0x370 [iw_cm]\n  process_one_work+0x1e2/0x3b0\n  worker_thread+0x49/0x2e0\n  ? rescuer_thread+0x370/0x370\n  kthread+0xe5/0x110\n  ? kthread_complete_and_exit+0x20/0x20\n  ret_from_fork+0x1f/0x30\n  \u003c/TASK\u003e"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The bug is triggered while processing an MPA CONNECT reply received over TCP from the remote iWARP peer on the active/client side of Soft-iWARP; a remote responder can deliver a partial then complete MPA reply to reach the vulnerable path.\nAC:L - A peer fully controls TCP segmentation of the MPA reply and can reliably force siw_recv_mpa_rr() to return -EAGAIN then complete; the fix commit also documents a simple, reliable local repro with ib_send_lat.\nPR:N - The attacking peer needs no privileges on the victim host; once a victim SIW client connects to the attacker, the malformed/fragmented MPA reply alone drives the duplicate CONNECT_REPLY upcall.\nUI:N - No additional user action is required beyond the RDMA connection attempt itself; automated or configured SIW clients connecting to a peer are sufficient to expose the path.\nS:U - The impact is a kernel BUG/oops in iw_cm on the same host that runs the SIW client; it does not cross a VM, IOMMU, or other security authority boundary.\nC:N - The failure is a state-machine BUG_ON on a duplicate IW_CM_EVENT_CONNECT_REPLY, not memory corruption or an information leak.\nI:N - There is no write primitive or corruptible object\u2014only an erroneous duplicate CM event that trips an assertion\u2014so integrity is not affected.\nA:H - The duplicate CONNECT_REPLY hits BUG_ON(cm_id_priv-\u003estate != IW_CM_STATE_CONN_SENT) in cm_conn_rep_handler, causing a kernel oops/panic and full denial of service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:57:30.552Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/11edf0bba15ea9df49478affec7974f351bb2f6e"
        },
        {
          "url": "https://git.kernel.org/stable/c/9ade92ddaf2347fb34298c02080caaa3cdd7c27b"
        },
        {
          "url": "https://git.kernel.org/stable/c/f6e26e1a5f600b760dc32135d3fac846eabe09e7"
        },
        {
          "url": "https://git.kernel.org/stable/c/0066246d2d7e2619f3ecf3cf07333c59e6e7d84d"
        },
        {
          "url": "https://git.kernel.org/stable/c/1434de50a5d9dab91c8ce031bc23b3e2178379c5"
        },
        {
          "url": "https://git.kernel.org/stable/c/3056fc6c32e613b760422b94c7617ac9a24a4721"
        }
      ],
      "title": "RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50136",
    "datePublished": "2025-06-18T11:03:00.289Z",
    "dateReserved": "2025-06-18T10:57:27.422Z",
    "dateUpdated": "2026-08-05T08:57:30.552Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-50136",
      "date": "2026-09-16",
      "epss": "0.00566",
      "percentile": "0.45478"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-50136\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-06-18T11:15:43.493\",\"lastModified\":\"2026-08-04T10:18:05.770\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nRDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event\\n\\nIf siw_recv_mpa_rr returns -EAGAIN, it means that the MPA reply hasn\u0027t\\nbeen received completely, and should not report IW_CM_EVENT_CONNECT_REPLY\\nin this case. This may trigger a call trace in iw_cm. A simple way to\\ntrigger this:\\n server: ib_send_lat\\n client: ib_send_lat -R \u003cserver_ip\u003e\\n\\nThe call trace looks like this:\\n\\n kernel BUG at drivers/infiniband/core/iwcm.c:894!\\n invalid opcode: 0000 [#1] PREEMPT SMP NOPTI\\n \u003c...\u003e\\n Workqueue: iw_cm_wq cm_work_handler [iw_cm]\\n Call Trace:\\n  \u003cTASK\u003e\\n  cm_work_handler+0x1dd/0x370 [iw_cm]\\n  process_one_work+0x1e2/0x3b0\\n  worker_thread+0x49/0x2e0\\n  ? rescuer_thread+0x370/0x370\\n  kthread+0xe5/0x110\\n  ? kthread_complete_and_exit+0x20/0x20\\n  ret_from_fork+0x1f/0x30\\n  \u003c/TASK\u003e\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/siw: Se corrige el evento IW_CM_EVENT_CONNECT_REPLY reportado duplicado. Si siw_recv_mpa_rr devuelve -EAGAIN, significa que la respuesta de MPA no se ha recibido completamente y, en este caso, no deber\u00eda reportar IW_CM_EVENT_CONNECT_REPLY. Esto podr\u00eda activar un seguimiento de llamadas en iw_cm. Una forma sencilla de activarlo: servidor: ib_send_lat cliente: ib_send_lat -R . El seguimiento de llamadas se ve as\u00ed: kernel BUG en drivers/infiniband/core/iwcm.c:894! C\u00f3digo de operaci\u00f3n no v\u00e1lido: 0000 [#1] PREEMPT SMP NOPTI \u0026lt;...\u0026gt; Cola de trabajo: iw_cm_wq cm_work_handler [iw_cm] Rastreo de llamadas:  cm_work_handler+0x1dd/0x370 [iw_cm] process_one_work+0x1e2/0x3b0 worker_thread+0x49/0x2e0 ? rescuer_thread+0x370/0x370 kthread+0xe5/0x110 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 \"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/infiniband/sw/siw/siw_cm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6c52fdc244b5ccc468006fd65a504d4ee33743c7\",\"lessThan\":\"11edf0bba15ea9df49478affec7974f351bb2f6e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c52fdc244b5ccc468006fd65a504d4ee33743c7\",\"lessThan\":\"9ade92ddaf2347fb34298c02080caaa3cdd7c27b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c52fdc244b5ccc468006fd65a504d4ee33743c7\",\"lessThan\":\"f6e26e1a5f600b760dc32135d3fac846eabe09e7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c52fdc244b5ccc468006fd65a504d4ee33743c7\",\"lessThan\":\"0066246d2d7e2619f3ecf3cf07333c59e6e7d84d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c52fdc244b5ccc468006fd65a504d4ee33743c7\",\"lessThan\":\"1434de50a5d9dab91c8ce031bc23b3e2178379c5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c52fdc244b5ccc468006fd65a504d4ee33743c7\",\"lessThan\":\"3056fc6c32e613b760422b94c7617ac9a24a4721\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/infiniband/sw/siw/siw_cm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.3\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.3\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.211\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.137\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.61\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.18.18\",\"lessThanOrEqual\":\"5.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.19.2\",\"lessThanOrEqual\":\"5.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.3\",\"versionEndExcluding\":\"5.4.211\",\"matchCriteriaId\":\"DABFD37F-7E0C-41E0-9811-29A4EF9C11FB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.137\",\"matchCriteriaId\":\"C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.61\",\"matchCriteriaId\":\"51861563-7F40-460F-82CD-2D3FBDAD6618\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"5.18.18\",\"matchCriteriaId\":\"5B42E453-8837-49D0-A5EF-03F818A6DC11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.19\",\"versionEndExcluding\":\"5.19.2\",\"matchCriteriaId\":\"A1A2A5A5-4598-4D7E-BA07-4660398D6C8F\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0066246d2d7e2619f3ecf3cf07333c59e6e7d84d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/11edf0bba15ea9df49478affec7974f351bb2f6e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1434de50a5d9dab91c8ce031bc23b3e2178379c5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3056fc6c32e613b760422b94c7617ac9a24a4721\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9ade92ddaf2347fb34298c02080caaa3cdd7c27b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f6e26e1a5f600b760dc32135d3fac846eabe09e7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:40:11+00:00",
      "cve": "CVE-2022-50136",
      "id": "CVE-2022-50136",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:fixed": "321",
      "product_status:known_affected": "38",
      "product_status:known_not_affected": "118",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-50136.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T01:26:09Z",
      "cve": "CVE-2022-50136",
      "id": "CVE-2022-50136",
      "initial_release_date": "2025-06-19T03:40:46Z",
      "product_status:known_affected": "370",
      "product_status:known_not_affected": "360",
      "product_status:recommended": "320",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2022-50136",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-50136.json",
      "version": "46"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.