VULNERABILITY INTELLIGENCE
CVE-2026-31491
CVSS score5.5 MEDIUM
EPSS probability0.12%
CISA KEVNot currently listed
Published2026-04-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size. This can cause integer overflow and truncation of SQ/RQ/SRQ depth returning a success when it should have failed. Harden the functions to do all depth calculations and boundary checking in u64 sizes.
Weakness classification
- CWE-190: Integer Overflow or Wraparound