CVE-2026-31565CWE-667

CVE-2026-31565

Medium · published April 24, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Fix deadlock during netdev reset with active connections

Resolve deadlock that occurs when user executes netdev reset while RDMA

applications (e.g., rping) are active. The netdev reset causes ice

driver to remove irdma auxiliary driver, triggering device_delete and

subsequent client removal. During client removal, uverbs_client waits

for QP reference count to reach zero while cma_client holds the final

reference, creating circular dependency and indefinite wait in iWARP

mode. Skip QP reference count wait during device reset to prevent

deadlock.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00132 · 2.5th percentile
Weakness
CWE-667 · Improper Locking
Published
2026-04-24T19:16Z
Affected products (15)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15.116, < 5.15.2035.15.203
linux/linux_kernel≥ 6.1.33, < 6.1.1686.1.168
linux/linux_kernel≥ 6.3.7, < 6.46.4
linux/linux_kernel≥ 6.4.1, < 6.6.1316.6.131
linux/linux_kernel≥ 6.7, < 6.12.806.12.80
linux/linux_kernel≥ 6.13, < 6.18.216.18.21
linux/linux_kernel≥ 6.19, < 6.19.116.19.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (10)
EPSS history
Timeline
  • 24 APR 14:35Z
    RDMA/irdma: Fix deadlock during netdev reset with active connections
    cvelistv5