CVE-2026-31565: RDMA/irdma: Fix deadlock during netdev reset with active connections

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-24 · updated 2026-10-15
Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix deadlock during netdev reset with active connections Resolve deadlock that occurs when user executes netdev reset while RDMA applications (e.g., rping) are active. The netdev reset causes ice driver to remove irdma auxiliary driver, triggering device_delete and subsequent client removal. During client removal, uverbs_client waits for QP reference count to reach zero while cma_client holds the final reference, creating circular dependency and indefinite wait in iWARP mode. Skip QP reference count wait during device reset to prevent deadlock.

Affected products

Linux kernel: from 5.15.116 before 5.15.203; from 6.1.33 before 6.1.168; from 6.3.7 before 6.4; from 6.4.1 before 6.6.131; from 6.7 before 6.12.80; from 6.13 before 6.18.21 — fixed in 5.15.203, 6.1.168, 6.12.80, 6.18.21, 6.19.11, 6.4

How to fix

Upgrade to a fixed version: Linux kernel 5.15.203, 6.1.168, 6.12.80, 6.18.21. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-31565 or the next vulnerability affects your stack