An unauthenticated remote attacker could exploit a memory management error in the Linux kernel RDMA/srpt subsystem to potentially trigger memory corruption or system instability.

This vulnerability is caused by improper handling of error states in the srpt_alloc_rw_ctxs function, where stale pointers and counters remain after a failed allocation. This flaw allows an unauthenticated attacker to induce inconsistent state in the RDMA send queue accounting.

The vulnerability carries a CVSS score of 9.8, indicating a critical severity level due to the potential for full system compromise. Successful exploitation could lead to denial of service through system crashes, or potentially remote code execution if the memory corruption can be reliably controlled. Such an impact threatens the availability and integrity of critical infrastructure relying on RDMA-enabled Linux servers.

Immediate Action: Update the Linux kernel to version 5.10.270, 5.15.221, 6.1.188, 6.6.157, or the latest stable kernel release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unusual memory usage patterns within RDMA-related services.

Compensating Controls: Restrict network access to RDMA-enabled services to trusted IP addresses only, and implement network segmentation to reduce the exposure of the kernel subsystem to untrusted traffic.

Public Exploit Available: Unknown

Given the critical CVSS score and the fundamental nature of the Linux kernel, this vulnerability poses a severe risk to system stability and security. Administrators should prioritize patching their kernel versions across all affected environments immediately to eliminate the possibility of memory-based exploitation.