The Linux kernel’s irdma RDMA driver previously used a waitqueue with a request_done flag without proper memory barriers, creating a concurrency flaw. This flaw allowed a race condition in which the flag could be observed before the underlying state was updated, potentially causing the driver to misinterpret the completion status of RDMA requests. The result is a loss of accurate RDMA communication, which can manifest as a denial of service or, in extreme cases, inconsistent kernel data structures.

The flaw exists in all kernel releases that contain the earlier irdma implementation, before the corrective commit bde37aed. The affected product is the Linux kernel from all vendors using the standard distribution. Any system running a kernel that has not incorporated the completion‑based fix remains vulnerable.

The EPSS score is < 1% and the vulnerability is not listed in CISA’s KEV catalog, indicating it has not yet been observed in the wild. The CVSS score of 9.8 classifies the vulnerability as critical. The likely attack vector is local, where an attacker can send RDMA packets to the vulnerable driver. While the patch replaces the waitqueue+flag with a completion primitive, the corrected code mitigates the race condition, reducing exploitation probability. Administrators should treat the issue as a high risk until the kernel is updated.