The defect revolves around cleanup logic in the RDMA/mana subsystem when creating a Queue Pair RSS. A duplicate decrement of an index counter causes the shutdown loop to skip an entry, while a failure in installing a completion queue callback prevents earlier work‑queue objects from being undone. This results in dangling references that may later be dereferenced or freed twice, corrupting kernel memory. Consequently, the system can crash or become unstable, yielding a denial‑of‑service.

The generic Linux kernel is affected when the RDMA/mana driver contains the buggy code path. Specific version information is not listed in the advisory; however, any kernel build before the patch commit that introduces the double decrement fix is potentially vulnerable. Systems that load the mana module or use RDMA operations are the most likely to exercise the vulnerable code.

Based on the CVSS score of 5.5, the vulnerability is classified as medium severity. The EPSS score remains below 1%, indicating a low likelihood of widespread exploitation. Because the issue can cause a kernel crash via erroneous cleanup in the RDMA/mana subsystem, the potential impact is a denial of service. Exploitation would require triggering the error path in the creation of a Queue Pair RSS, likely through a local RDMA application running with elevated privileges, which can bring the system down or force a reboot. The attack vector is expected to be local or within a privileged user‑space RDMA workload rather than remote.