{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"3f08351de5ca4f2f724b86ad252fbc21289467e1","status":"affected","version":"563e1feb5f6ed579acb55850f1bbb831aecf645a","versionType":"git"},{"lessThan":"cbd852f5700eb3f64392452faf693ac45cae8281","status":"affected","version":"563e1feb5f6ed579acb55850f1bbb831aecf645a","versionType":"git"},{"lessThan":"e37afcb56ae070477741fe2d6e61fc0c542cce2d","status":"affected","version":"563e1feb5f6ed579acb55850f1bbb831aecf645a","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.18"},{"lessThan":"6.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.21","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.11","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-31491","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Harden depth calculation functions\n\nAn issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size.\nThis can cause integer overflow and truncation of SQ/RQ/SRQ depth\nreturning a success when it should have failed.\n\nHarden the functions to do all depth calculations and boundary\nchecking in u64 sizes.","epss":{"date":"2026-11-05","percentile":0.01903,"score":0.00121},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793915101859,"publishedAt":1776866054905,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/3f08351de5ca4f2f724b86ad252fbc21289467e1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/cbd852f5700eb3f64392452faf693ac45cae8281"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/e37afcb56ae070477741fe2d6e61fc0c542cce2d"}],"remediation":[],"revision":"fa3535937c6f87e2adc65de92871bc15c965ef542a172fc93b4f15a4eb0824a7","sources":[{"modifiedAt":1793915101859,"name":"CNA: Linux","retrievedAt":1793917062487,"url":"https://www.cve.org/CVERecord?id=CVE-2026-31491"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793917073951,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-31491"}],"ssvc":{"assessedAt":1793914507008,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"RDMA/irdma: Harden depth calculation functions","updatedAt":1793917073951}