A critical out-of-bounds memory access vulnerability in the Linux kernel nvmet-rdma component could allow an unauthenticated attacker to achieve remote code execution or system compromise.

The vulnerability resides in the nvmet_rdma_use_inline_sg function, where improper handling of inline data offsets leads to an integer underflow. This allows the scatterlist length to be miscalculated as approximately 4 GiB, enabling an unauthenticated attacker to trigger an out-of-bounds read or write operation in the kernel memory space.

Successful exploitation of this vulnerability poses a severe risk to organizational infrastructure, as it allows for arbitrary code execution within the kernel context. Given the CVSS score of 9.8, the potential for total system compromise, data exfiltration, and service disruption is extremely high, necessitating immediate attention for any systems utilizing the nvmet-rdma interface.

Immediate Action: System administrators must update the Linux kernel to the patched versions (5.10.261, 5.15.212, 6.1.178, 6.6.145, or newer) provided by their distribution maintainers.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected process crashes that may indicate exploitation attempts against the nvmet-rdma module.

Compensating Controls: If immediate patching is not feasible, restrict network access to the RDMA-enabled interfaces to trusted management subnets to reduce the attack surface.

Public Exploit Available: Unknown

Due to the critical nature of this kernel vulnerability and the potential for full system compromise, organizations should prioritize the deployment of security updates across all affected Linux infrastructure. Immediate patching of the kernel is the only reliable method to mitigate this risk, and administrative teams should verify that their specific distribution has backported these fixes.