VDB

DEBIAN-CVE-2026-31565

DEBIAN-CVE-2026-31565 PUBLISHED CVSS 5.5 MEDIUM

Record from OSV · Published April 24, 2026

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix deadlock during netdev reset with active connections Resolve deadlock that occurs when user executes netdev reset while RDMA applications (e.g., rping) are active. The netdev reset causes ice driver to remove irdma auxiliary driver, triggering device_delete and subsequent client removal. During client removal, uverbs_client waits for QP reference count to reach zero while cma_client holds the final reference, creating circular dependency and indefinite wait in iWARP mode. Skip QP reference count wait during device reset to prevent deadlock.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
linuxDebian:136.12.85-1
linuxDebian:146.19.11-1
linuxDebian:126.1.170-1

Risk scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductVersions
Debian:13linux6.12.85-1~bpo12+1, 6.12.74-2~bpo12+1, 6.12.74-2
Debian:14linux6.12.73-1~bpo12+1, 6.12.74-1, 6.12.74-2
Debian:12linux6.1.153-1, 6.1.158-1, 6.1.159-1

Timeline

  • Apr 24, 2026 CVE Published
  • Oct 15, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln DEBIAN-CVE-2026-31565
vulnetix vdb fixes DEBIAN-CVE-2026-31565

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2026-31565/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›