The vulnerability stems from a race condition in the Linux kernel's RDMA/nldev subsystem. When rereg_mr reassigns the protection domain (PD), concurrent accesses to mr->pd become unsafe, potentially allowing an attacker to read or write to the wrong PD, leading to memory corruption or incorrect device context. The weakness is a classic race condition (CWE-366).

All releases of the Linux kernel that contain the vulnerable RDMA/nldev code are affected. The patch addresses the issue in the kernel code base; exact kernel versions are not specified, so it is safest to assume all earlier kernel versions are vulnerable until patched.

The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, indicating no public exploitation has been reported. However, the nature of the race condition means that if an attacker can trigger concurrent RDMA operations or control the rereg_mr flow, they could potentially corrupt memory or disrupt RDMA functionality. This CVSS score of 7.8 categorizes it as high severity, and combined with low exploitation probability warrants prompt remediation.