A critical vulnerability in the Linux kernel RPC/RDMA subsystem permits unauthenticated remote attackers to perform out of bounds memory access, potentially leading to information disclosure or system compromise.

The vulnerability exists in the svcrdma component due to improper validation of Read chunk positions supplied by remote clients. This allows an unauthenticated attacker to cause integer underflows during chunk reconstruction, resulting in memory copies beyond the intended receive buffer boundaries.

Successful exploitation of this flaw allows an unauthenticated attacker to read sensitive kernel memory or potentially overwrite adjacent slab memory. Given the CVSS score of 9.8, this vulnerability poses a severe risk to system integrity and confidentiality. Organizations relying on RDMA-enabled storage or networking services may face unauthorized data access and potential service instability.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for kernel panics or unusual RPC/RDMA traffic patterns that may indicate attempts to exploit memory alignment or chunk reconstruction logic.

Compensating Controls: If immediate patching is not feasible, restrict access to the RDMA interface at the network layer to trusted hosts only, as this reduces the attack surface for remote exploitation.

Public Exploit Available: Unknown

This vulnerability represents a critical security risk due to the potential for unauthenticated remote exploitation within the kernel space. Administrators should prioritize the deployment of the provided kernel patches across all affected environments to prevent unauthorized access to sensitive memory regions. Regular auditing of kernel versions is essential to ensure protection against this and other memory management flaws.