A high-severity NULL pointer dereference vulnerability in the Linux kernel svcrdma implementation exposes systems to remote denial-of-service attacks.

The svcrdma component fails to properly validate the cumulative length of Read segments against the page budget, leading to an out-of-bounds access. This allows an unauthenticated remote attacker to trigger a NULL pointer dereference during DMA mapping, resulting in kernel panic and system instability.

The vulnerability carries a CVSS score of 7.5, indicating a high risk to service availability. Successful exploitation results in a kernel-level crash, which can cause significant downtime for critical infrastructure or services relying on the affected Linux kernel. As the attack vector is network-based and requires no authentication, it presents a substantial threat to exposed NFS or RDMA-enabled services.

Immediate Action: Update the Linux kernel to version 6.18.51, 7.2.4, or later versions as provided by your distribution maintainer.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages associated with svcrdma or RDMA operations, which may indicate attempted exploitation.

Compensating Controls: Restrict network access to RDMA and NFS services to trusted internal segments to prevent unauthenticated remote attackers from reaching the vulnerable interface.

Public Exploit Available: Unknown

Given the potential for complete system denial of service, administrators must prioritize patching the Linux kernel to the aforementioned secure versions. Organizations running RDMA or NFS services should verify their kernel versions immediately and apply vendor-supplied updates to eliminate the risk of remote kernel panic.