A vulnerability in the Linux kernel RDMA subsystem could allow a local authenticated attacker to trigger a use-after-free condition, potentially resulting in code execution or system instability.

This is a use-after-free flaw within the RDMA/erdma driver. It occurs because Queue Pair (QP) references are accessed outside of the xarray lock, allowing the destruction path to free resources while they are still in use, requiring low-privileged local access to exploit.

The CVSS score of 7.8 reflects the high risk posed by this vulnerability. While the exploit requires local access, the potential for local privilege escalation or system-wide denial of service poses a significant threat to server integrity and availability. Compromise of kernel-level operations can undermine all security controls on the host system.

Immediate Action: Update the Linux kernel to version 6.12.110, 6.18.52, 7.2.6, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic events related to the RDMA driver, as these may indicate attempted exploitation or crash conditions.

Compensating Controls: Restrict access to the system to authorized users only, as the vulnerability requires local access to trigger. Disable RDMA features if they are not required for your operational environment.

Public Exploit Available: No (exploit_available: unknown)

Given the severity of potential kernel-level exploitation, organizations running affected Linux kernel versions should prioritize patching during the next maintenance cycle. System administrators must ensure that kernel updates are tested in a staging environment before deployment to production to prevent potential compatibility issues with hardware drivers.