CVE-2021-47616

A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) subsystem. A local user could exploit this vulnerability to cause a Denial of Service (DoS) via a system crash or potentially achieve privilege escalation. This issue occurs due to a use-after-free vulnerability in the software RDMA driver, where an error during queue pair initialization leads to memory being freed more than once during cleanup.

This vulnerability is rated as having a Low impact because the Software RDMA over Ethernet (rdma_rxe) kernel module is not loaded by default on Red Hat Enterprise Linux and requires specific local configuration to be reachable. Exploiting this issue requires local administrative privileges or access to configure RDMA queue pairs on an active RXE interface. Under typical deployments where soft-RoCE devices are not configured, systems are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.