The vulnerability results from a buffer overflow module (CWE-787). When an RPC‑over‑RDMA client requests a reply without a Write list or Reply chunk, the kernel may linearize a reply that exceeds the pull‑up buffer size. The copied data overwrites adjacent slab memory, corrupting kernel structures. This memory corruption could result in system instability or crashes.

This flaw affects any Linux kernel that has not yet incorporated the svcrdma pull‑up buffer overflow fix. All distributions shipping the Linux kernel with the svcrdma module are potentially impacted, regardless of vendor.

Based on the description, it is inferred that the attacker can reach the target via RPC‑over‑RDMA traffic. The likely attack vector is through the RDMA network interface, where the attacker sends a crafted request that triggers pull‑up logic and causes memory corruption. The CVSS score of 8.1 indicates a high severity, but the EPSS score of < 1% suggests a low probability of active exploitation at present. The vulnerability is not listed in CISA’s KEV catalog. Because the overflow corrupts kernel memory, a successful exploit could lead to loss of system integrity or availability.