Riskcovery

CVE-2026-31491

RDMA/irdma: Harden depth calculation functions

State
Published
Severity
Not scored
Published
Apr 22, 2026
Updated
May 11, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Harden depth calculation functions

An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size. This can cause integer overflow and truncation of SQ/RQ/SRQ depth returning a success when it should have failed.

Harden the functions to do all depth calculations and boundary checking in u64 sizes.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 563e1feb5f6ed579acb55850f1bbb831aecf645a to before 3f08351de5ca4f2f724b86ad252fbc21289467e1Affected
  • 563e1feb5f6ed579acb55850f1bbb831aecf645a to before cbd852f5700eb3f64392452faf693ac45cae8281Affected
  • 563e1feb5f6ed579acb55850f1bbb831aecf645a to before e37afcb56ae070477741fe2d6e61fc0c542cce2dAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.21 through 6.18.*Not affected
  • 6.19.11 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.