CVE-2026-31491: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size. This can cause integer overflow and truncation of SQ/RQ/SRQ depth returning a success when it should have failed. Harden the functions to do all depth calculations and boundary checking in u64 sizes.

Засегнати продукти

• Linux Linux: 563e1feb5f6ed579acb55850f1bbb831aecf645a преди 3f08351de5ca4f2f724b86ad252fbc21289467e1; 563e1feb5f6ed579acb55850f1bbb831aecf645a преди cbd852f5700eb3f64392452faf693ac45cae8281; 563e1feb5f6ed579acb55850f1bbb831aecf645a преди e37afcb56ae070477741fe2d6e61fc0c542cce2d
• Linux Linux: 6.18; преди 6.18; 6.18.21 до 6.18.*; 6.19.11 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-31491
• https://nvd.nist.gov/vuln/detail/CVE-2026-31491
• https://git.kernel.org/stable/c/3f08351de5ca4f2f724b86ad252fbc21289467e1
• https://git.kernel.org/stable/c/cbd852f5700eb3f64392452faf693ac45cae8281
• https://git.kernel.org/stable/c/e37afcb56ae070477741fe2d6e61fc0c542cce2d