Initialization Flaw in Linux Kernel Affecting RDMA/irdma Functionality

CVE-2026-31492

What is CVE-2026-31492?

A vulnerability was identified in the Linux kernel's RDMA/irdma component, specifically in the irdma_create_qp function. When the ib_copy_to_udata operation fails, the subsequent cleanup process attempts to utilize the free_qp completion object, which has not been properly initialized. This can lead to undefined behavior or potential system instability. The issue has been addressed by ensuring the free_qp completion is initialized prior to calling ib_copy_to_udata, thus enhancing the overall stability and reliability of the RDMA functionality.

References