CVE-2026-31491

תיאור (מקור, אנגלית)

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size. This can cause integer overflow and truncation of SQ/RQ/SRQ depth returning a success when it should have failed. Harden the functions to do all depth calculations and boundary checking in u64 sizes.

מדדים

CVSS 3.1

5.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-25/9/2026

CWE

CWE-190

מוצרים מושפעים

linux: linux kernel

קישורים

• https://git.kernel.org/stable/c/3f08351de5ca4f2f724b86ad252fbc21289467e1 Patch
• https://git.kernel.org/stable/c/cbd852f5700eb3f64392452faf693ac45cae8281 Patch
• https://git.kernel.org/stable/c/e37afcb56ae070477741fe2d6e61fc0c542cce2d Patch