Invalid Read Vulnerability in Linux Kernel Affecting RDMA

CVE-2025-71133

What is CVE-2025-71133?

The vulnerability in the Linux kernel's RDMA/irdma component allows for an invalid read condition when handling network events. Specifically, the irdma_net_event function erroneously dereferences certain pointers before confirming their associated events. This can lead to misleading results or crashes, particularly during debugging sessions, where it may trigger Kernel Address Sanitizer (KASAN) warnings. By adjusting how the function processes network event structures, developers can mitigate the risk of erratic behavior linked to various event types.

References