The vulnerability exists in the Linux kernel’s RDS (Remote Direct Memory Access) networking stack. When rds_message_map_pages assigns PAGE_SIZE bytes to each scatterlist entry, it fails to adjust the final mapping for partial pages. On systems where PAGE_SIZE exceeds the 8192‑byte RDS congestion map—such as 16K or larger pages—the scatterlist includes bytes that lie beyond the congestion map boundary. These extraneous bytes are sent over the TCP RDS stream, where they are misinterpreted as additional RDS message headers, corrupting the stream. The corruption can cause malformed message parsing, service interruption, or data integrity problems; the description does not indicate any code‑execution capability.

The flaw is present in Linux kernel releases that deploy RDS with page sizes larger than 8192 bytes before the patch commit. All kernel versions prior to the inclusion of the fix are potentially affected. Exact distribution and version details are not supplied, so administrators should verify whether their kernel contains the protective change and whether RDS is configured for large pages.

The CVSS score is 7.0 and the EPSS score is < 1%, indicating a moderate to high severity but a low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is network‑based: an attacker could send crafted RDS‑TCP packets to a vulnerable host, inducing stream corruption. While no public exploit is documented, the risk remains for environments that rely on RDS with large page configurations.