A resource leak in the Linux kernel nvmet-rdma driver can lead to kernel memory exhaustion and system instability, posing a significant risk to storage infrastructure.

This vulnerability is a resource leak occurring when an NVMe target using RDMA transport is removed while I/O operations are active. An unauthenticated attacker can trigger this state, causing the system to fail to release RDMA read/write contexts and request SGLs, which eventually results in kernel memory depletion.

Successful exploitation of this vulnerability results in a denial of service, as the continuous leakage of kernel memory will eventually crash the host system. Given the critical role of the NVMe target in storage environments, this could lead to significant downtime, data unavailability, and potential corruption of pending I/O operations. The CVSS score of 7.5 reflects the high impact on system availability and the ease of network-based exploitation.

Immediate Action: Update the Linux kernel to version 5.15.221, 6.1.188, 6.6.157, 6.12.110, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor kernel logs for memory allocation failures or suspicious activity related to the nvmet-rdma driver during high-load periods or service teardown events.

Compensating Controls: Restrict network access to the NVMe-over-RDMA endpoints to trusted administrative segments to prevent unauthorized parties from initiating the vulnerable teardown sequence.

Public Exploit Available: Unknown.

This vulnerability presents a clear risk to system stability in environments utilizing NVMe-over-RDMA. Administrators should prioritize patching the Linux kernel to the specified fixed versions to prevent potential memory exhaustion and service interruption. Immediate testing and deployment of these kernel updates are strongly recommended for all affected production storage servers.