CVE-2026-31493

A flaw was found in the Linux kernel's RDMA/efa component. When an admin command completes with an error during admin queue completion handling, the system attempts to print data from a completion context that has already been freed. This use-after-free vulnerability can lead to the disclosure of sensitive information or system instability, as data is accessed from an unknown memory state.

The EFA driver now frees admin completion contexts only after all diagnostic printing, keeping alloc/free symmetric. Red Hat considers this a local RDMA admin-queue UAF class defect until proven otherwise. Errata kernels include the fix; unload efa on nodes without AWS EFA NICs if policy allows.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the efa module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.