CVE-2026-31491
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-04-22
Modified: 2026-11-11
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size. This can cause integer overflow and truncation of SQ/RQ/SRQ depth returning a success when it should have failed. Harden the functions to do all depth calculations and boundary checking in u64 sizes.
Weakness Classification (1)
Affected Software (13)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 563e1feb5f6ed579acb55850f1bbb831aecf645a < 3f08351de5ca4f2f724b86ad252fbc21289467e1 |
| Linux | Linux | 563e1feb5f6ed579acb55850f1bbb831aecf645a < cbd852f5700eb3f64392452faf693ac45cae8281 |
| Linux | Linux | 563e1feb5f6ed579acb55850f1bbb831aecf645a < e37afcb56ae070477741fe2d6e61fc0c542cce2d |
| Linux | Linux | 6.18 |
| linux | linux_kernel | 6.18.1 – 6.18.21 |
| linux | linux_kernel | 6.18 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |