A bug in the svcrdma listener creation path causes a reference counter imbalance raw kfree, bypassing svc_xprt_free, which normally releases the net namespace reference and module reference. This leads to a module reference count imbalance, potentially causing a kernel crash or instability.

All Linux kernels that contain the svcrdma module are affected. The patch applies to all distributions that ship a kernel with this module before the update. No specific version string is supplied, so any kernel requiring a fix for this issue should update to a version that includes the change.

The CVSS score of 5.9 indicates a moderate severity. EPSS score of < 1% indicates a low but non‑zero exploitation probability, and the issue is not listed as a known exploited vulnerability by CISA. The flaw requires local privileged execution on the kernel, such as a user with the ability to load or unload modules. Once exploited, the consequence is a resource leak with the risk of a kernel crash, depending on the frequency of the failure path. The likely attack vector is inferred to be local and relies on triggering a. The impact is primarily availability and stability rather than confidentiality or integrity.