CVE-2026-31565: Linux vulnerability

CVE-2026-31565: RDMA/irdma: Fix deadlock during netdev reset with active connections

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix deadlock during netdev reset with active connections Resolve deadlock that occurs when user executes netdev reset while RDMA applications (e.g., rping) are active. The netdev reset causes ice driver to remove irdma auxiliary driver, triggering device_delete and subsequent client removal. During client removal, uverbs_client waits for QP reference count to reach zero while cma_client holds the final reference, creating circular dependency and indefinite wait in iWARP mode. Skip QP reference count wait during device reset to prevent deadlock.

UnknownCVSS not scoredNot KEV-listedUpdatedOct 15, 2026, 01:17 UTC (UTC+00:00)

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2026-31565 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup

Vulnerability profileCVE Program record

Severity: Unknown
CVSS: Not scored
Known Exploited: No
Published: Apr 24, 2026, 14:35 UTC (UTC+00:00)

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors

3Timeline events

1ADP providers

11Source links

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
Mar 9, 2026, 15:48 UTC (UTC+00:00)
CVE publishedCVE Program
The CVE record was published.
Apr 24, 2026, 14:35 UTC (UTC+00:00)
CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Oct 15, 2026, 01:17 UTC (UTC+00:00)

ADP provider summaries

Source materials

CVE List V5 sourceCVE List V5
https://git.kernel.org/stable/c/009831768faeca3fb5950ce63f1b49594ec82389CVE reference, Linux
https://git.kernel.org/stable/c/adf0de36e52a48681eb58cbd7cbf6c8d200caa2bCVE reference, Linux
https://git.kernel.org/stable/c/acb060bc2609c2eab49263968be59c7d59d497bcCVE reference, Linux
https://git.kernel.org/stable/c/a8a1c7621127a15a02494b96ee376406c064237bCVE reference, Linux
https://git.kernel.org/stable/c/cd8bcec2de5e24e05c34c9391940fda6f50e79b4CVE reference, Linux
https://git.kernel.org/stable/c/464bbb844ba5b68e038220c34019069a0a9f1581CVE reference, Linux
https://git.kernel.org/stable/c/6f52370970ac07d352a7af4089e55e0e6425f827CVE reference, Linux
https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlCVE reference, siemens-SADP
https://cert-portal.siemens.com/productcert/html/ssa-019113.htmlCVE reference, siemens-SADP
https://cert-portal.siemens.com/productcert/html/ssa-457936.htmlCVE reference, siemens-SADP

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus

LinuxLinux0b3c392b82cdf867808a8ea7c6760d3c7e6b6627, 07322c8a12d6c796450faacb8be9e5e3c278ec84, c8f304d75f6c6cc679a73f89591f9a915da38f09, c8f304d75f6c6cc679a73f89591f9a915da38f09, c8f304d75f6c6cc679a73f89591f9a915da38f09, c8f304d75f6c6cc679a73f89591f9a915da38f09, c8f304d75f6c6cc679a73f89591f9a915da38f09, 6ee53f82540769a6d6e77e40b901f9b9edfa5ff2, 5.15.116, 6.1.33, 6.3.7unaffected

LinuxLinux6.4, 0, 5.15.203, 6.1.168, 6.6.131, 6.12.80, 6.18.21, 6.19.11, 7.0affected

Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.