A high-severity use-after-free vulnerability in the Linux kernel RDMA/cxgb4 driver allows a local user to potentially trigger memory corruption and achieve arbitrary code execution.

The vulnerability stems from a race condition in the RDMA/cxgb4 driver where the device context is freed while background registration work is still pending or active. This allows the kernel to access freed memory, and it requires an authenticated local attacker with low privileges to trigger the condition.

Successful exploitation of this flaw allows a local, authenticated attacker to escalate privileges or cause a system crash, leading to a denial of service. With a CVSS score of 7.8, this represents a significant risk to system integrity and availability, particularly in multi-tenant environments or systems where local access is granted to untrusted users.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation fault errors associated with the cxgb4 driver, which may indicate attempted exploitation or crash conditions.

Compensating Controls: Restrict access to the system to authorized users only, as the vulnerability requires local access to the affected hardware/driver stack. Ensure regular kernel security auditing is performed to identify and mitigate local privilege escalation vectors.

Public Exploit Available: No

Given the potential for local privilege escalation and system instability, organizations using Linux kernels with RDMA support should prioritize patching the kernel. Apply the recommended kernel updates across all affected environments as part of your next scheduled maintenance cycle to eliminate this risk.