The vulnerability causes a double cleanup of the RDMA request command and a DMA unmap after the request has already been completed when an error returns with -EIO. This improper order can corrupt memory or lead to unpredictable behaviour by freeing resources that are no longer in use. The impacted component is the NVMe over RDMA queue_rq path in the Linux kernel.

Linux kernel, all revisions that contain the NVMe over RDMA implementation. Specific affected kernel version information is not available from the data.

There is no CVSS score or EPSS value reported, and the issue is not listed in the CISA KEV catalog. The risk of exploitation depends on the ability to trigger an EIO error under the NVMe over RDMA path, which would likely require privileged or direct access to the target kernel. The lack of a public exploit and the internal nature of the bug suggest a moderate or lower exploitation probability, but any double cleanup that can corrupt memory should be addressed promptly. The only mitigation is applying the patch that reorders the cleanup to avoid double unmap.