A vulnerability in the Linux kernel smbdirect component allows an unauthenticated remote attacker to trigger a system denial of service via specifically crafted connection requests.

This vulnerability is a resource management error occurring during the RDMA connection acceptance process, where the kernel incorrectly destroys memory pools before destroying the queue pair (QP). This allows an unauthenticated attacker to cause a null pointer dereference or slab cache corruption, resulting in a denial of service.

The primary risk associated with this vulnerability is an unauthenticated denial of service, which can cause system instability or complete kernel panic. Given the CVSS score of 7.5, this represents a significant risk to service availability for systems utilizing smbdirect for high-speed networking. Disruption to kernel services can lead to unplanned downtime for dependent applications and infrastructure.

Immediate Action: Update the Linux kernel to version 7.2.6 or later, or apply the upstream patches provided by the Linux stable maintainers.

Proactive Monitoring: Monitor system logs for kernel oops, slab cache errors, or unexpected system reboots that coincide with network connection attempts.

Compensating Controls: If patching is not immediately feasible, restrict access to SMB Direct services to trusted network segments to reduce the attack surface.

Public Exploit Available: No

Organizations running Linux environments with SMB Direct enabled should prioritize this update during their next maintenance cycle. Because this flaw resides in the kernel, a system reboot will be required to finalize the remediation, so plan accordingly to ensure system uptime requirements are met while addressing this high-severity risk.