A high-severity use-after-free vulnerability in the Linux kernel RDMA subsystem could allow a local attacker to achieve privilege escalation or system instability.

This is a use-after-free flaw occurring within the rxe_odp_mr_init_user function in the RDMA/rxe driver. The vulnerability is triggered when an error occurs during ODP page initialization, as the kernel fails to clear a pointer to freed memory, which is subsequently accessed by the cleanup path.

The flaw carries a CVSS score of 7.8, indicating a high risk for local environments. A successful exploit allows a local authenticated user to corrupt kernel memory, potentially leading to unauthorized privilege escalation, denial of service through system crashes, or arbitrary code execution within the kernel context.

Immediate Action: Update the Linux kernel to version 6.18.52, 7.2.6, or a later stable release where this issue has been resolved.

Proactive Monitoring: Monitor system logs for kernel panic events or repeated segmentation faults in processes interacting with the RDMA/rxe subsystem.

Compensating Controls: Restrict access to systems utilizing RDMA features to trusted users only, as the attack vector requires local access to the system.

Public Exploit Available: Unknown

Given the potential for privilege escalation, administrators should prioritize patching the Linux kernel across all affected environments. While this vulnerability requires local access, the severity of a kernel-level exploit necessitates prompt remediation to prevent unauthorized escalation of privileges.