A critical use-after-free vulnerability in the Linux kernel RDMA/erdma driver may allow a local attacker to achieve elevated privileges or cause system instability.

The RDMA/erdma driver fails to properly hold completion queue (CQ) references when processing event queue (EQ) events. This race condition allows the destruction of a CQ while an EQ handler is still actively using it, resulting in a use-after-free scenario reachable by local authenticated users.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation allows a local attacker to execute arbitrary code with kernel privileges, leading to full system compromise, data theft, or persistent denial of service. While exploitation requires local access, the impact on organizational security posture is severe due to the potential for complete host control.

Immediate Action: Update the Linux kernel to versions 6.1.188, 6.6.157, 6.12.110, 6.18.52, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages specifically associated with RDMA or erdma driver functions.

Compensating Controls: Restrict access to RDMA-enabled hardware and ensure that only authorized users have the capability to interact with kernel-level interfaces.

Public Exploit Available: No

Given the potential for local privilege escalation, administrators should prioritize patching the kernel across all affected infrastructure. Apply the verified security updates as soon as they are made available by your upstream Linux distribution provider to mitigate the risk of kernel-level exploitation.