{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"ac1da7bd224d406b6f1b84414f0f652ab43b6bd8","status":"affected","version":"b48c24c2d710cf34810c555dcef883a3d35a9c08","versionType":"git"},{"lessThan":"af310407f79d5816fc0ab3638e1588b6193316dd","status":"affected","version":"b48c24c2d710cf34810c555dcef883a3d35a9c08","versionType":"git"},{"lessThan":"cd1534c8f4984432382c240f6784408497f5bb0a","status":"affected","version":"b48c24c2d710cf34810c555dcef883a3d35a9c08","versionType":"git"},{"lessThan":"3cb88c12461b71c7d9c604aa2e6a9a477ecfa147","status":"affected","version":"b48c24c2d710cf34810c555dcef883a3d35a9c08","versionType":"git"},{"lessThan":"f72996834f7bdefc2b95e3eec30447ee195df44e","status":"affected","version":"b48c24c2d710cf34810c555dcef883a3d35a9c08","versionType":"git"},{"lessThan":"11a95521fb93c91e2d4ef9d53dc80ef0a755549b","status":"affected","version":"b48c24c2d710cf34810c555dcef883a3d35a9c08","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.14"},{"lessThan":"5.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.131","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.80","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.21","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.11","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-31492","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Initialize free_qp completion before using it\n\nIn irdma_create_qp, if ib_copy_to_udata fails, it will call\nirdma_destroy_qp to clean up which will attempt to wait on\nthe free_qp completion, which is not initialized yet. Fix this\nby initializing the completion before the ib_copy_to_udata call.","epss":{"date":"2026-11-05","percentile":0.02035,"score":0.00123},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793915102074,"publishedAt":1776866055581,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ac1da7bd224d406b6f1b84414f0f652ab43b6bd8"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/af310407f79d5816fc0ab3638e1588b6193316dd"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/cd1534c8f4984432382c240f6784408497f5bb0a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/3cb88c12461b71c7d9c604aa2e6a9a477ecfa147"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/f72996834f7bdefc2b95e3eec30447ee195df44e"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/11a95521fb93c91e2d4ef9d53dc80ef0a755549b"}],"remediation":[],"revision":"a26e515c63023b2bcfb1288c775c615f08c64f1af93d0d4a0edd7eec499cdfde","sources":[{"modifiedAt":1793915102074,"name":"CNA: Linux","retrievedAt":1793917063604,"url":"https://www.cve.org/CVERecord?id=CVE-2026-31492"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793917073870,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-31492"}],"ssvc":{"assessedAt":1793914511846,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"RDMA/irdma: Initialize free_qp completion before using it","updatedAt":1793917073870}