The vulnerability originates in the Linux kernel's RDMA/rxe subsystem, specifically during the modification of the IB_QP_MAX_DEST_RD_ATOMIC attribute. The kernel code lacks proper locking when reallocating resources, allowing a local unprivileged user to race a free and allocate sequence. This race condition results in a use‑after‑free within the rxe_receiver() task, causing the system to crash or become unresponsive. The primary impact is a local denial of service rather than remote code execution or data exfiltration. The weakness is a classic use‑after‑free flaw that can be easily triggered by an attacker who can execute code on the affected machine.

This issue affects the Linux kernel, as the CVE references kernel commit logs and the designated CPE is cpe:2.3:o:linux:linux_kernel. No specific kernel version range is listed in the entry, so any installation of the Linux kernel that contains the vulnerable rxe driver code is potentially affected. System administrators should verify whether their kernel build includes rxe support and whether the patch has been applied.

The exploit requires local privileges and a race condition, meaning the attack is relatively straightforward for any user who can run commands on the machine. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Without an assigned CVSS score, the exact severity cannot be quantified from the available data, but the local denial of service nature indicates a moderate to high risk for systems that rely on RDMA functionality. Organizations that disable RDMA or patch the kernel will mitigate this risk.