The vulnerability is a use‑after‑free within the RDMA core code, specifically in the process that frees DMA hash table entries (dmah). When the RDMA context is released via the netlink interface, the code releases vendor‑specific resources before correctly removing the dmah from the restriction tracking list. This creates a short window where the dmah can still be referenced, allowing a use‑after‑free scenario that could corrupt memory or enable arbitrary code execution. Additionally, this flaw aligns with CWE‑825: Defect in Resource Management, due to the improper sequencing of cleanup steps.

The affected product is the Linux kernel, particularly the RDMA core subsystem. The vendors are listed as Linux:Linux. No specific kernel version range is provided in the advisory, but any kernel version containing the buggy dmah cleanup logic before the fix commit would be vulnerable.

The CVSS score is 5.5, and the EPSS score is < 1%, indicating the vulnerability has a medium severity and a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation would likely require a local privileged attacker who can interact with the RDMAue abstraction over netlink, and precise timing to trigger the use‑after‑free before the removed dmah is garbage‑collected. Given the lack of public exploits and the need for local access, the overall risk can be considered moderate to low, but the potential impact warrants immediate remediation.