GHSA-fx4x-f93f-2jqv · Severity: high — In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of...
In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after free On admin queue completion handling, if the admin command completed with error we print data from the completion context. The issue is that we already freed the completion context in polling/interrupts handler which means we print data from context in an unknown state (it might be already used again). Change the admin submission flow so alloc/dealloc of the context will be symmetric and dealloc will be called after any potential use of the context.
Conclusion & alert: CVE-2026-31493 is rated Low Risk (2.8/100): low exploitation likelihood (EPSS 0.13%). Mandatory action: Low composite risk—no urgent action required; patch on your normal maintenance cycle and revisit priority if CVSS or EPSS increases.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.02% | 0.13% | +0.11% |
| 2 | 2026-04-23 | — | 0.02% | — |
Full EPSS history (2 records total)
CVSS metrics for this CVE.
No CVSS data in dataset for this CVE.
GHSA-fx4x-f93f-2jqv · Severity: high — In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of...
| vendor | priority | summary | link |
|---|---|---|---|
debian
|
unimportant | CVE-2026-31493 unimportant priority: Debian including 1 source packages (linux), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 3, open 2. | https://security-tracker.debian.org/tracker/CVE-2026-31493 |
redhat
|
medium | — | https://access.redhat.com/security/cve/CVE-2026-31493 |
suse
|
medium | CVE-2026-31493 severity moderate: SUSE including 16 source package names (cluster-md-kmp-default, dlm-kmp-default, …), 58 product×package rows across 12 product lines (SUSE Linux Enterprise Live Patching 12 SP5, SUSE Linux Enterprise Micro 5.0, … (12 product lines)): Known Not Affected 58. | https://www.suse.com/security/cve/CVE-2026-31493/ |
ubuntu
|
medium | CVE-2026-31493 medium priority: Ubuntu including 161 source packages (linux, linux-allwinner-5.19, …), 1449 status rows across 9 suites (bionic, focal, jammy, noble, questing, resolute, trusty, upstream, xenial): DNE 1048, ignored 169, needed 88, released 83, not-affected 57, needs-triage 4. | https://ubuntu.com/security/CVE-2026-31493 |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| No affected products in dataset. | |||