The Linux kernel RDMA ionic driver did not implement the required adaptation introduced by commit 7e53b31acc7f, which mandates that drivers embedding struct rdma_counter register its size and provide a counter_init callback. The ionic driver failed to set size_rdma_counter, causing rdma_zalloc_drv_obj() to allocate zero bytes and resulting in a NULL pointer dereference in alloc_and_bind(). The vulnerability was fixed by consolidating ionic_counter into ionic_rdma_counter embedding struct rdma_counter, replacing the xarray with a lightweight ID allocator, and adding the required counter_init and INIT_RDMA_OBJ_SIZE declarations.

This vulnerability could cause a NULL pointer dereference in the Linux kernel RDMA ionic driver, potentially leading to kernel crashes or denial of service. No information about exploitation in the wild or further impact is provided.

A fix has been implemented in the Linux kernel source code by consolidating the ionic_counter structure and adding the required initialization declarations. Users should update to the fixed kernel version containing this patch. Patch status is not explicitly stated; check the vendor or Linux kernel advisory for the exact fixed version and update accordingly.