PT-2026-34917 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-04-29 · CVE-2026-31565

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock occurs in the RDMA/irdma component when a netdev reset is executed while RDMA applications are active. The netdev reset leads the ice driver to remove the irdma auxiliary driver, which triggers device delete and client removal. During this process, uverbs client waits for the Queue Pair (QP) reference count to reach zero, but cma client holds the final reference. This creates a circular dependency and an indefinite wait in iWARP mode.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2026-31565

ECHO-E3DA-69A4-D1BF

Affected Products

Linux Kernel

References · 17

• https://git.kernel.org/stable/c/464bbb844ba5b68e038220c34019069a0a9f1581 · Patch
• https://git.kernel.org/stable/c/009831768faeca3fb5950ce63f1b49594ec82389 · Patch
• https://git.kernel.org/stable/c/cd8bcec2de5e24e05c34c9391940fda6f50e79b4 · Patch
• https://git.kernel.org/stable/c/6f52370970ac07d352a7af4089e55e0e6425f827 · Patch
• https://ubuntu.com/security/CVE-2026-31565 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31565 · Security Note
• https://git.kernel.org/stable/c/acb060bc2609c2eab49263968be59c7d59d497bc · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31565 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31565 · Vendor Advisory
• https://git.kernel.org/stable/c/a8a1c7621127a15a02494b96ee376406c064237b · Patch
• https://git.kernel.org/stable/c/adf0de36e52a48681eb58cbd7cbf6c8d200caa2b · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31565 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31565 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-31565 · Vendor Advisory
• https://twitter.com/CVEnew/status/2047798620687380509 · Twitter Post