CVE-2022-49929: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49929 is a vulnerability discovered in the Linux kernel affecting the RDMA/rxe subsystem. The issue was identified and reported in May 2025, specifically related to a memory reference counting issue in the RESPST_ERR_RNR state handling (NVD).

The vulnerability stems from a memory reference counting bug where rxe_recheck_mr() increases the memory region's reference count (mr's ref_cnt) but fails to properly decrease it in the RESPST_ERR_RNR state. This leads to a potential memory leak in the RDMA/rxe subsystem (Red Hat). The issue has been assigned a CVSS v3.1 base score of 5.5, indicating moderate severity (Red Hat).

The vulnerability can result in memory leaks in the Linux kernel's RDMA subsystem, potentially leading to resource exhaustion over time (Wiz).

The vulnerability has been classified with a local attack vector, requiring local access to the system to exploit. No public exploits have been reported (Wiz).

Red Hat has deferred fixes for affected versions of Red Hat Enterprise Linux 9 and kernel-rt packages. The vulnerability has been resolved in the Linux kernel through a patch that properly handles reference counting in the RESPST_ERR_RNR state (Red Hat).