What’s Vulnerable › Vulnerabilities

CVE-2026-31491: RDMA/irdma: Harden depth calculation functions

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-22 · updated 2026-06-17
• Weakness: CWE-190

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size. This can cause integer overflow and truncation of SQ/RQ/SRQ depth returning a success when it should have failed. Harden the functions to do all depth calculations and boundary checking in u64 sizes.

Affected products

• Linux kernel: from 6.18.1 before 6.18.21; from 6.19 before 6.19.11; 6.18, 7.0-rc1, 7.0-rc2, 7.0-rc3, 7.0-rc4, 7.0-rc5 (+2) — fixed in 6.18.21, 6.19.11

How to fix

Upgrade to a fixed version: Linux kernel 6.18.21, 6.19.11. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3f08351de5ca4f2f724b86ad252fbc21289467e1
• https://git.kernel.org/stable/c/cbd852f5700eb3f64392452faf693ac45cae8281
• https://git.kernel.org/stable/c/e37afcb56ae070477741fe2d6e61fc0c542cce2d

Get alerted when CVE-2026-31491 or the next vulnerability affects your stack