A high-severity memory management vulnerability in the Linux kernel RDMA/irdma subsystem could allow a local attacker to achieve privilege escalation or system instability.

The vulnerability is a reference counting issue in the RDMA/irdma driver where memory regions (MR) backing queue pairs or completion queues are not properly protected. An authenticated local user with low privileges can trigger a deregistration of these memory regions, leading to a race condition or memory corruption.

Successful exploitation of this vulnerability allows an attacker to compromise the integrity and availability of the host system. Because the flaw resides within the kernel, a local attacker could potentially escalate privileges to root or cause a kernel panic, resulting in unauthorized access to sensitive data or critical service disruption. The CVSS score of 7.8 reflects the high potential for system-wide impact despite the requirement for local access.

Immediate Action: Update the Linux kernel to version 6.18.52, 7.2.6, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for repeated kernel crashes or RDMA-related error messages that may indicate an attempt to trigger the race condition.

Compensating Controls: Restrict access to RDMA-capable hardware interfaces to only authorized users and services to reduce the attack surface for local exploitation.

Public Exploit Available: Unknown

Given the potential for kernel-level compromise, organizations should prioritize patching the Linux kernel across all affected environments. Administrators should verify their current kernel version against the provided fixed releases and coordinate maintenance windows to apply the necessary updates, as this vulnerability poses a significant risk to system stability and security.