A use-after-free vulnerability in the Linux kernel RDMA subsystem allows a local authenticated attacker to potentially achieve privilege escalation or system instability.

The vulnerability resides in the ib_destroy_srq_user function within the RDMA core. An attacker with local access can exploit a race condition during the destruction of an SRQ via the netlink path, which leads to a use-after-free scenario when resources are freed prematurely while still accessible via restrack.

Successful exploitation of this vulnerability allows a local attacker to cause a denial of service or potentially execute arbitrary code with elevated privileges. Given the CVSS score of 7.8, this flaw represents a significant risk to system integrity and availability, particularly in multi-tenant environments or systems where untrusted local users have access.

Immediate Action: Update the Linux kernel to version 6.1.188, 6.6.157, 6.12.110, 6.18.52, or any later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic events related to the rdma_core module or netlink communication errors.

Compensating Controls: Restrict access to the RDMA subsystem and netlink interfaces to only necessary users and processes to reduce the attack surface.

Public Exploit Available: Unknown

Organizations should prioritize patching their Linux kernels to the identified fixed versions to eliminate the use-after-free condition. While local access is required, the potential for privilege escalation makes this a high-priority update for all Linux-based infrastructure.