The vulnerability resides in the RDMA mana driver of the Linux kernel, specifically in the mana_ib_create_qp_rss() routine. When a user supplies work queues that share a completion queue via the user‑level API, a WARN_ON() assertion is triggered. Instead of rejecting the request, the code continues execution and subsequently corrupts kernel memory. This results in kernel instability, leading to crashes or a denial‑of‑service condition. The defect is an instance of improper input validation (CWE‑1288).

The affected systems are all Linux kernel builds that include the unpatched mana RDMA driver. Because no specific version range is provided, any kernel version containing the vulnerable mana_ib_create_qp_rss() function is potentially impacted until the patch is applied. All supported distributions are likely affected if their kernel package remains upstream with the vulnerability.

The CVSS base score of 7.8 indicates a medium‑to‑high severity vulnerability. The EPSS score of less than 1% and absence from the CISA KEV catalogue suggest a low probability of exploitation in the wild. Based on the description, it is inferred that an attacker would need the ability to interact with the RDMA user API, supplying crafted work queue identifiers that share a completion queue. This privilege is typically limited to processes with RDMA access or elevated privileges, meaning the attack vector is most likely local or requires an already compromised RDMA service. While exploitation could lead to kernel corruption and subsequent denial of service, the practical exploitation window appears constrained by the low EPSS.