CVE-2025-22086

A flaw was found in the Linux kernel's mlx5 Remote Direct Memory Access (RDMA) driver. When handling completion queue entries, the driver incorrectly matches firmware queue pair numbers against internal driver structures, leading to the selection of an invalid queue pair. A local user could exploit this issue during completion queue polling to trigger a null pointer dereference, causing a kernel crash and a Denial of Service (DoS).

This vulnerability is rated as having a Low severity for Red Hat Enterprise Linux because exploitation requires environments equipped with Mellanox ConnectX hardware actively utilizing RDMA, with impact confined to a local denial of service via a kernel panic. Standard deployments that do not configure InfiniBand or RoCE subsystems with the mlx5 driver are not exposed. Furthermore, an attacker requires local privileges to manipulate queue pairs, and the flaw does not compromise data confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.