The flaw lies in the RDMA/efa subsystem where the completion IRQ handler accesses an EQ state and DMA buffer that may not yet be fully initialized or might have already been freed. The bug surfaces when the IRQ is registered before the EQ resources are properly set up, and during teardown the IRQ is freed before the EQ is destroyed. This misordered resource handling can lead to kernel memory corruption or a crash when the handler accesses invalid memory. The weakness is a race‑like issue reflected in CWE‑821.

The insecure logic exists in the Linux kernel's RDMA/efa driver. Any kernel build that contains the buggy IRQ registration and teardown ordering is vulnerable. Systems that enable RDMA or efa and run an affected kernel release are at risk. The specific kernel version range is not listed, but the advisory indicates the issue is fixed in later kernel commits.

The CVSS score of 7.0 indicates a high severity. The EPSS score below 1% suggests that, at the time of assessment, the probability of exploitation is low, but kernel memory corruption vulnerabilities remain inherently risky. Although the vulnerability is not currently listed in the CISA KEV catalog, an attacker with the ability to send crafted RDMA packets or with local access could potentially trigger the fault, leading to a kernel panic or other instability. Prevention involves updating the kernel or disabling the vulnerable RDMA components.