A use-after-free vulnerability exists in the Linux kernel RDMA/siw subsystem, which could allow a local authenticated attacker to gain elevated privileges or cause system instability.

The siw_accept function in the Linux kernel RDMA implementation contains a use-after-free flaw during error cleanup, where an incorrect reference release allows access to a freed connection endpoint. This vulnerability requires an attacker to have local access and low privileges to execute the malicious sequence.

The potential impact of this vulnerability includes full system compromise, as use-after-free flaws in the kernel often facilitate privilege escalation or arbitrary code execution. Given the CVSS score of 7.8, this represents a significant risk to the integrity and availability of affected systems. Organizations running kernel versions within the vulnerable range face an increased threat of local exploitation leading to unauthorized administrative access.

Immediate Action: Update the Linux kernel to version 5.10.270, 5.15.221, 6.1.188, or 6.6.157, or the latest stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected process crashes that may indicate exploitation attempts targeting the RDMA subsystem.

Compensating Controls: Restrict access to RDMA-capable interfaces to authorized users only, and apply strict kernel hardening policies to limit the potential for local privilege escalation.

Public Exploit Available: Unknown

This vulnerability presents a high risk to systems utilizing the RDMA/siw subsystem. Administrators should prioritize the deployment of the provided kernel patches to eliminate the use-after-free condition. If immediate patching is not feasible, restrict local user access to the affected hardware components to mitigate the risk of exploitation.