CVE-2022-50445: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50445 is a vulnerability in the Linux kernel related to the xfrm subsystem's handling of transport-mode packets. The issue was discovered when the tcp6-multi-diffip11 stress test case of the LTP test suite triggered a CPU soft lockup warning, indicating a potential system stability issue (NVD).

The vulnerability manifests as a CPU soft lockup condition where CPU#0 becomes stuck for 22 seconds during the execution of the tcp6-multi-diffip11 stress test. The issue occurs specifically in the xfrm subsystem's handling of transport-mode packets and involves the des3edeencrypt function in the crypto subsystem. The problem was identified through a detailed call trace that showed the execution path through various kernel subsystems including crypto, ESP6, and TCP processing (NVD).

When triggered, this vulnerability can cause system performance degradation and potential system instability due to CPU soft lockups. This can affect system availability and responsiveness, particularly in environments where the xfrm subsystem is actively used for network packet processing (NVD).

The vulnerability has been resolved in the Linux kernel through modifications to reinject transport-mode packets through a workqueue. The fix was implemented through several kernel patches, as evidenced by multiple commit references (NVD).