The vulnerability resides in the RDMA/siw subsystem of the Linux kernel. When siw_get_hdr() fails and returns -EINVAL before set_rx_fpdu_context(), qp->rx_fpdu can be NULL. The error path in siw_tcp_rx_data() then dereferences qp->rx_fpdu->more_ddp_segs without checking if rx_fpdu is present, causing a kernel crash. KASAN logs demonstrate a null-pointer dereference, which results in a denial‑of‑service condition without any direct evidence of privilege escalation from the available data.

The affected product is the Linux kernel itself. No specific kernel versions are listed in the advisory, so any system that includes the RDMA/siw module before the fix is considered vulnerable. Administrators should assume all current distributions containing this code path are at risk until the patch is applied.

The CVSS score of 7.5 indicates high severity. The EPSS score of less than 1% suggests a low likelihood of exploitation, and the vulnerability is not currently in the CISA KEV catalog. The likely attack vector is remote, inferred from the fact that the vulnerable code processes incoming RDMA traffic; an attacker would need to send crafted SiW packets to trigger the crash. If exploited, the crash would disrupt system availability and could potentially allow further local privilege escalation if the system does not recover automatically.