The vulnerability allows a user application to invoke rereg_mr on special memory region registrations that should not be re-registered. This causes the kernel to issue a CQP command with a zero‑initialized mkey value, which can be interpreted as a valid operation address and trigger a crash or denial of service. The underlying weakness is an improper initialization of the mkey (CWE‑665) coupled with unauthorized use of the operation on protected memory (CWE‑285). This deficiency allows attackers with control over user-space RDMA calls to destabilize the system, potentially causing a kernel panic or service disruption.

The misbehavior occurs in the Linux kernel’s RDMA irdma driver. All users of the Linux kernel before the applied fix are potentially affected, regardless of distribution, since the issue lies in kernel source code. No explicit version range is provided, but any kernel built from the reported source commits is vulnerable until patched.

The flaw is of kernel level impact but would require an attacker to execute or influence user’s application logic so that rereg_mr is called on the protected memory region. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, indicating that exploitation is not known or reported. The risk therefore depends on the attack surface of user applications that use RDMA through irdma and the ability to invoke rereg_mr. A successful exploitation could cause a kernel panic and denial of service, but no proven public exploit exists at this time.