CVE-2012-4516: librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to...

Security readout for executives and security teams

CVE-2012-4516 affects librdmacm 1.0.16 in a specific RDMA address resolution configuration. If ibacm.port is unset, the library connects to port 6125, allowing a malicious ib_acm service to provide address resolution information to an application. Evidence does not show active exploitation. Exposure is likely limited to systems running librdmacm 1.0.16 with RDMA/InfiniBand address resolution enabled and ibacm.port unset. General web applications are unlikely to be affected unless they depend on this RDMA stack. Treat this as a targeted infrastructure risk, not a broad internet emergency. Prioritize environments using RDMA, InfiniBand, or HPC networking, especially where address resolution services are reachable beyond trusted administrative networks. Mitigation focus: Identify systems using librdmacm 1.0.16 or affected vendor packages.; Apply vendor updates that include the upstream OpenFabrics fix.; Set ibacm.port explicitly where vendor guidance recommends it..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.