CVE-2025-71157
kernel: Kernel: Resource management flaw in RDMA/core can lead to denial of service
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · January 23, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) core component. This resource management vulnerability, specifically an incorrect handling of device reference counts in the ib_del_sub_device_and_put() function, could allow a local attacker with low privileges to cause a denial of service. This could lead to system instability or crashes, impacting the availability, integrity, and confidentiality of the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
CWE-911 · Improper Update of Reference Count