CVE-2026-31492

A flaw was found in the Linux kernel's RDMA (Remote Direct Memory Access) irdma driver. This vulnerability occurs when the free_qp completion is not properly initialized before being used during the cleanup process in irdma_destroy_qp, specifically if the ib_copy_to_udata function fails. An attacker could potentially trigger this uninitialized wait, leading to system instability or a denial of service (DoS).

Upstream initializes the free_qp completion before any failure path can invoke irdma_destroy_qp(). Red Hat treats this as a local RDMA driver robustness issue on Intel Ethernet RDMA hardware. Customers should update kernels; optional mitigation is unloading irdma where unused.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the irdma module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.