CVE-2026-31491 in Linux
要約
〜によって MITRE • 2026年04月22日
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Harden depth calculation functions
An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size. This can cause integer overflow and truncation of SQ/RQ/SRQ depth returning a success when it should have failed.
Harden the functions to do all depth calculations and boundary checking in u64 sizes.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.