CVE-2026-31493 Details
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after free On admin queue completion handling, if the admin command completed with error we print data from the completion context. The issue is that we already freed the completion context in polling/interrupts handler which means we print data from context in an unknown state (it might be already used again). Change the admin submission flow so alloc/dealloc of the context will be symmetric and dealloc will be called after any potential use of the context.
A vulnerability in the Linux kernel's RDMA/EFA component allows for use-after-free issues with completion contexts. When an admin command completes with an error, the kernel attempts to print data from the completion context. However, this context may have already been freed during the handling of interrupts or polling, leading to the potential for data to be reused incorrectly. The vulnerability arises because the allocation and deallocation of completion contexts are not synchronized, with deallocation occurring before the context can be safely used. This flaw could be exploited to access invalid memory, possibly leading to undefined behavior or memory corruption.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for upgrading the Linux kernel can be found in the official Linux documentation or through the package management system of the respective Linux distribution.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0dd98aea1c0c45987fa2dd92f988b0eb1a72c125 | kernel.org | Patch |
| https://git.kernel.org/stable/c/1cf95fe5dc5471efea947b4c6f8913da6bc7976e | kernel.org | Patch |
| https://git.kernel.org/stable/c/ef3b06742c8a201d0e83edc9a33a89a4fe3009f8 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.12.1, < 6.18.21 >= 6.19, < 6.19.11 5.12 - 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 7.0 rc7 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Apr 28, 2026 | Initial Analysis | [email protected] |
| Apr 22, 2026 | New CVE Received | kernel.org |