Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0053 42.7 —
AFFECTED
Product Versions Fixed
Linux 6c52fdc244b5ccc468006fd65a504d4ee33743c7 – —
Linux 5.3 – 5.4.211
TIMELINE
Jun 18 Reserved by Linux
Jun 18 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2022-50136 (Linux). CVSS 7.5 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event
If siw_recv_mpa_rr returns -EAGAIN, it means that the MPA reply hasn't
been received completely, and should not report IW_CM_EVENT_CONNECT_REPLY
in this case. This may trigger a call trace in iw_cm. A simple way to
trigger this:
server: ib_send_lat
client: ib_send_lat -R <server_ip>
The call trace looks like this:
kernel BUG at drivers/infiniband/core/iwcm.c:894!
invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
<...>
Workqueue: iw_cm_wq cm_work_handler [iw_cm]
Call Trace:
<TASK>
cm_work_handler+0x1dd/0x370 [iw_cm]
process_one_work+0x1e2/0x3b0
worker_thread+0x49/0x2e0
? rescuer_thread+0x370/0x370
kthread+0xe5/0x110
? kthread_complete_and_exit+0x20/0x20
ret_from_fork+0x1f/0x30
</TASK>
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| June 18, 2025 | Reserved | Reserved by Linux |
| June 18, 2025 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2022-50136 (Linux). CVSS 7.5 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 6c52fdc244b5ccc468006fd65a504d4ee33743c7 | — |
| Linux | Linux | — | 5.3 | 5.4.211 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2022-50136 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.