Integer Overflow in Linux Kernel's RDMA/irdma Functions

CVE-2026-31491

What is CVE-2026-31491?

A vulnerability exists in the Linux kernel affecting the RDMA/irdma components, where an integer overflow can occur due to improper handling of size parameters. When the OS passes U32_MAX values for certain queue sizes (SQ, RQ, SRQ), it can lead to unexpected behavior, resulting in truncation of these sizes. As a result, the system erroneously returns success even in failure scenarios, which may compromise system integrity. Recent updates have strengthened depth calculation functions and enforced boundary checking to mitigate these risks.

References