Linux Kernel RDMA/rtrs NULL Pointer Dereference Vulnerability

Vulnerability

A vulnerability in the Linux kernel's RDMA/rtrs component could lead to a NULL pointer dereference. This issue arises because the 'ib_sge list' variable was declared within the 'always_invalidate' block, restricting its accessibility. The vulnerability has been addressed by moving the declaration outside the block, ensuring the variable is available for use throughout the function.

Impact

Exploitation of this vulnerability causes a kernel NULL pointer dereference, leading to a system crash.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.