CVE-2026-31492

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-04-22 Modified: 2026-11-11 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Initialize free_qp completion before using it In irdma_create_qp, if ib_copy_to_udata fails, it will call irdma_destroy_qp to clean up which will attempt to wait on the free_qp completion, which is not initialized yet. Fix this by initializing the completion before the ib_copy_to_udata call.

Weakness Classification (1)

Affected Software (16)

VendorProductVersion
Linux Linux b48c24c2d710cf34810c555dcef883a3d35a9c08 < ac1da7bd224d406b6f1b84414f0f652ab43b6bd8
Linux Linux b48c24c2d710cf34810c555dcef883a3d35a9c08 < af310407f79d5816fc0ab3638e1588b6193316dd
Linux Linux b48c24c2d710cf34810c555dcef883a3d35a9c08 < cd1534c8f4984432382c240f6784408497f5bb0a
Linux Linux b48c24c2d710cf34810c555dcef883a3d35a9c08 < 3cb88c12461b71c7d9c604aa2e6a9a477ecfa147
Linux Linux b48c24c2d710cf34810c555dcef883a3d35a9c08 < f72996834f7bdefc2b95e3eec30447ee195df44e
Linux Linux b48c24c2d710cf34810c555dcef883a3d35a9c08 < 11a95521fb93c91e2d4ef9d53dc80ef0a755549b
Linux Linux 5.14
linux linux_kernel 5.14.1 – 6.1.168
linux linux_kernel 5.14
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.12%
Raw Score 0.001230
Percentile 2.1%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00123
2026-11-13
0.00123
2026-11-12
0.00123
2026-11-10
0.00123
2026-11-09
0.00123
2026-11-08
0.00123
2026-11-07
0.00123
2026-11-06
0.00123
2026-11-05
0.00123

Intelligence Sources

mitre ref →
nvd ref →