Linux Kernel RDMA Slab-Use-After-Free Vulnerability in Device Registration

Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's RDMA subsystem, specifically during the device registration process. This issue arises in versions of the Linux kernel that include the problematic RDMA device handling. The vulnerability is caused by a lack of proper lock synchronization when renaming RDMA devices, leading to a race condition. As a result, the device name can be accessed without appropriate protection, creating a window for memory corruption.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, potentially allowing for arbitrary memory access or manipulation.

Added: Jun 18, 2025, 12:09 PM
Updated: Jun 18, 2025, 12:09 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.