A high-severity vulnerability in the Linux kernel RDMA/bnxt_re component allows a local attacker to cause a denial of service or potentially escalate privileges.

The vulnerability originates from a lack of validation for the Work Queue Entry (WQE) mode against hardware-supported slot limits. A local attacker with low privileges can supply an invalid WQE mode value, leading to memory corruption or system instability.

With a CVSS score of 8.8, this vulnerability poses a severe risk to system availability and integrity. A local attacker could leverage this flaw to crash the system or escalate privileges to gain full control, which is particularly critical in multi-tenant environments or shared hosting infrastructure.

Immediate Action: Apply the kernel updates or patches corresponding to commit a59d815cbe667929b693b5fa6716a074e6a31c5b and dc95931b7e1326dacae547874bf38c092e5960d8, or upgrade to version 7.1.5 or later.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected process crashes related to RDMA drivers.

Compensating Controls: Restrict access to the system to trusted users only and disable RDMA functionality if it is not required for production workloads.

Public Exploit Available: No confirmed public exploit available.

Given the potential for high-impact system disruption or privilege escalation, updating the Linux kernel to a patched version is the recommended course of action. System administrators should prioritize testing and deploying these kernel updates in their staging environments before moving to production.