CVE-2026-72468

A flaw was found in the Linux kernel's xprtrdma component. A local administrator can exploit a race condition during an NFS/RDMA mount operation against RDMA device removal. This can lead to a null pointer dereference, causing the kernel to crash and resulting in a Denial of Service (DoS).

This vulnerability is rated as Low severity by Red Hat because exploitation requires local administrative privileges, specialized RDMA hardware, and a tightly timed race condition. Typical enterprise environments do not employ RDMA-based network storage, and users with sufficient access to mount filesystems or detach hardware already exercise substantial control over the host. Consequently, the practical risk is limited to an administrator-induced kernel crash rather than an unauthorized compromise or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.