A high-severity race condition in the Linux kernel RDMA transport layer could allow an attacker to trigger a use-after-free vulnerability, potentially leading to system instability or arbitrary code execution.

This is a race condition (CWE-362) occurring within the svcrdma module. An attacker can trigger a use-after-free vulnerability because the transport notification entry remains active in the device xarray after the associated connection identifier has been destroyed, which may be exploited by an unauthenticated remote attacker.

The vulnerability carries a CVSS score of 8.1, indicating a high risk to availability, integrity, and confidentiality. Successful exploitation could result in a kernel panic, leading to system downtime, or potentially allow an attacker to execute arbitrary code within the kernel context, compromising the entire host environment.

Immediate Action: Update the Linux kernel to version 6.18.51, 7.2.4, or later versions containing the upstream fix commits 9f2f5d0999364c7070306cd422d8babc2621070d, cfca6eb3345ba4a23cf9a1153ad09bf19faabfc9, or 4488e912973773d64368828acf3b8e39d93650ae.

Proactive Monitoring: Monitor system logs for kernel oops, segmentation faults, or unexpected crashes associated with the svcrdma module or RDMA interface activity.

Compensating Controls: Restrict access to RDMA-enabled services to trusted management networks and utilize host-based firewalls to limit the exposure of the underlying transport services.

Public Exploit Available: No

Given the potential for kernel-level impact and the high CVSS severity, administrators should prioritize patching affected Linux distributions as soon as stable kernel updates are released by their respective vendors. Verify that your kernel version is updated beyond the identified fixed releases to effectively mitigate the risk of this race condition.