Linux Kernel RDMA/rxe Error Handling Vulnerability in Queue Pair Initialization

A vulnerability has been identified in the Linux kernel's RDMA/rxe component, specifically within the queue pair (QP) initialization process. The issue arises in the function 'rxe_create_qp()', where the QP is initialized before the necessary spin locks are set up. If an error occurs prior to the spin locks being initialized, the subsequent error handling will attempt to clean up using uninitialized resources, leading to a system crash. This vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability causes a system crash due to improper error handling that accesses uninitialized spin locks, leading to a kernel oops.