A use-after-free vulnerability in the Linux kernel RDMA core poses a significant risk for local privilege escalation and system instability.

This flaw exists within the RDMA core synchronization logic, specifically in the ib_free_cq function. An attacker with local low-level user privileges can exploit a race condition during the destruction of completion queue resources to trigger a use-after-free, potentially leading to arbitrary code execution or kernel panic.

The vulnerability carries a CVSS score of 7.8, reflecting its high potential for system compromise. Successful exploitation allows a local user to escalate privileges or cause a complete system denial of service, which could disrupt critical business operations or facilitate unauthorized access to sensitive data processed by the kernel.

Immediate Action: Update the Linux kernel to the corrected versions provided by your distribution (e.g., 5.15.221, 6.1.188, 6.6.157, or 6.12.110) as soon as patches become available through your package management system.

Proactive Monitoring: Review system logs for kernel oops or unexpected system reboots that may indicate exploit attempts targeting the RDMA subsystem.

Compensating Controls: Restrict access to the system to only trusted users, as the attack requires local access. If RDMA functionality is not required for production workloads, consider disabling the associated modules to reduce the attack surface.

Public Exploit Available: Unknown

Given the potential for local privilege escalation, administrators should prioritize updating kernel packages across all affected Linux environments. While the attack vector is limited to local users, the severity of a kernel-level use-after-free necessitates prompt remediation to maintain system integrity and prevent unauthorized escalation of privileges.