CVE-2026-31491

Summary

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Harden depth calculation functions

An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size. This can cause integer overflow and truncation of SQ/RQ/SRQ depth returning a success when it should have failed.

Harden the functions to do all depth calculations and boundary checking in u64 sizes.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux563e1feb5f6ed579acb55850f1bbb831aecf645a < 3f08351de5ca4f2f724b86ad252fbc21289467e1affected
LinuxLinux563e1feb5f6ed579acb55850f1bbb831aecf645a < cbd852f5700eb3f64392452faf693ac45cae8281affected
LinuxLinux563e1feb5f6ed579acb55850f1bbb831aecf645a < e37afcb56ae070477741fe2d6e61fc0c542cce2daffected
LinuxLinux6.18affected
LinuxLinux0 < 6.18unaffected
LinuxLinux6.18.21 <= 6.18.*unaffected
LinuxLinux6.19.11 <= 6.19.*unaffected
LinuxLinux7.0 <= *unaffected

Weaknesses

References