A use-after-free vulnerability exists in the Linux kernel svcrdma component, which could allow an unauthenticated attacker on the local network to trigger a system crash or potentially execute arbitrary code.

This is a use-after-free vulnerability occurring within the svc_rdma_listen_handler function. When a listener replacement fails, the kernel fails to clear the sc_cm_id pointer, resulting in a dereference of a freed pointer during subsequent operations by an unauthenticated attacker.

The vulnerability carries a CVSS score of 8.8, indicating a high level of severity. Successful exploitation could lead to system instability, causing denial of service (system crashes), or potentially unauthorized code execution. Given the critical nature of the Linux kernel, this poses a significant risk to the availability and integrity of infrastructure relying on RDMA services.

Immediate Action: Upgrade the Linux kernel to version 7.2.4 or apply the upstream patches identified in the Linux stable git repositories (commits 673e358ab7c11f8cec223c6a36a793056a67facd and 01500306e1d50de7ca7a2cdcdfa28ac0523eb747).

Proactive Monitoring: Monitor system logs for kernel panics or unexpected service restarts related to the svcrdma module.

Compensating Controls: If immediate patching is not feasible, restrict network access to RDMA-enabled interfaces to trusted segments only, as the vulnerability requires access to the adjacent network.

Public Exploit Available: Unknown.

This vulnerability represents a significant risk to kernel stability and security. Administrators should prioritize the deployment of the provided kernel updates across all affected systems. Given that this is a memory management flaw, patching is the only reliable method to eliminate the risk of exploitation.