A high-severity vulnerability in the Linux kernel RDMA subsystem allows unauthenticated attackers to trigger a packet processing loop, resulting in potential system instability or denial of service.

The vulnerability exists within the RDMA/rxe responder state machine, which fails to correctly handle queue pair (QP) state transitions. An unauthenticated attacker can exploit this logic error during a race condition, such as a disconnect, to force the kernel into an infinite loop that reprocesses packets.

The vulnerability carries a CVSS score of 8.2, reflecting its capacity to cause significant system disruption. By inducing a kernel-level loop, an attacker can cause a denial of service, rendering network services unavailable and potentially impacting the stability of the underlying host. Such instability in kernel operations may necessitate a hard reboot of critical infrastructure, leading to operational downtime.

Immediate Action: Administrators must update the Linux kernel to the corrected versions (6.6.157, 6.12.110, 6.18.52, 7.2.6, or later) provided by their distribution maintainers.

Proactive Monitoring: Security teams should monitor system logs for recurring RDMA error messages or unusual spikes in CPU utilization associated with kernel threads.

Compensating Controls: If immediate patching is not feasible, restrict access to RDMA-enabled interfaces to trusted internal networks only to minimize the exposure to external trigger attempts.

Public Exploit Available: No

Given the high CVSS severity and the potential for kernel-level denial of service, organizations utilizing RDMA/rxe functionality should prioritize this update. Apply the latest kernel patches as soon as they are made available by your vendor or distribution maintainer to eliminate the risk of state machine exploitation.