This vulnerability arises from a circular dependency between mmap_lock and disassociation_lock in the RDMA/uverbs subsystem of the Linux kernel. The deadlock can occur when one thread holds mmap_lock while attempting to acquire disassociation_lock and another holds the opposite order, leading to a stand‑still that stalls kernel activity. The fix removes the disassociation_lock and relies on the existing hw_destroy_rwsem to serialize access, eliminating the deadlock. This flaw does not allow privilege escalation or arbitrary code execution; it merely disrupts availability for the affected system.

Any Linux kernel that includes the default RDMA/uverbs implementation prior to the inclusion of commit 51976c6cd786 is affected. The vulnerability is present in kernels that have not applied this change, regardless of distribution or kernel version. Systems with the commit or a backport are not vulnerable.

The EPSS indicates a very low probability of exploitation (<1%). The CVSS score of 5.5 classifies the issue as moderate severity. This is primarily a local issue; a user with RDMA capability could trigger the deadlock by performing concurrent mmap and unmap operations. Because no public exploits are known and the flaw does not allow privilege escalation, the overall risk remains low to moderate and is limited to local users or systems that can execute RDMA operations.