The Linux kernel’s ib_umem_find_best_pgsz() in RDMA/umem has a flaw where the 64‑bit iova value is truncated when passed as a 32‑bit argument and large length values can overflow a GENMASK. This incorrect handling of boundary conditions could allow a malicious requester of RDMA memory registration to cause memory corruption or an out‑of‑bounds access, potentially leading to denial of service or privilege escalation if the kernel process is compromised.

Affected systems are Linux kernel distributions. The vendor list lists Linux only and no specific kernel release or patch level is provided, so all kernels prior to the patch that introduced the relevant commits are considered vulnerable. Administrators should verify whether their kernel includes the commits referenced in the advisory.

The EPSS score is unavailable and the vulnerability is not listed in CISA KEV, so the public exploitation probability is currently unknown. However, the bug involves kernel memory and boundary checks, making it a high‑risk flaw. A local or privileged attacker with control over RDMA memory registration could trigger the overflow or truncation logic, leading to kernel memory corruption. The lack of available exploit data suggests no confirmed public exploits yet, but given the severity of kernel memory corruption, proactive mitigation is recommended.