CVE-2026-31491: RDMA/irdma: Harden depth calculation functions
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Harden depth calculation functions
An issue was exposed where OS can pass in U32MAX for SQ/RQ/SRQ size. This can cause integer overflow and truncation of SQ/RQ/SRQ depth returning a success when it should have failed.
Harden the functions to do all depth calculations and boundary checking in u64 sizes.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.21 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.19.11 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.19.11-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31491?
CVE-2026-31491 has been classified as a medium severity vulnerability.
How do I fix CVE-2026-31491?
To fix CVE-2026-31491, update your Linux kernel to the latest stable version that includes the patched depth calculation functions.
What are the implications of CVE-2026-31491?
CVE-2026-31491 can lead to integer overflow and truncation of queue depths, potentially affecting RDMA (Remote Direct Memory Access) functionality.
Which versions of the Linux kernel are affected by CVE-2026-31491?
CVE-2026-31491 affects multiple versions of the Linux kernel prior to the inclusion of the patch that addresses this vulnerability.
Is CVE-2026-31491 an exploitable vulnerability?
While CVE-2026-31491 may not be directly exploitable, it can lead to stability and security issues in RDMA-enabled applications.