In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after free On admin queue completion handling, if the admin command completed with error we print data from the completion context. The issue is that we already freed the completion context in polling/interrupts handler which means we print data from context in an unknown state (it might be already used again). Change the admin submission flow so alloc/dealloc of the context will be symmetric and dealloc will be called after any potential use of the context.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RDMA/efa: Fix use of completion ctx after free On admin queue completion handling, if the admin command     completed with error we print data from the completion context. The issue is that we already freed the     completion context in polling/interrupts handler which means we print data from context in an unknown     state (it might be already used again). Change the admin submission flow so alloc/dealloc of the context     will be symmetric and dealloc will be called after any potential use of the context. (CVE-2026-31493)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
323086	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:2482-1)	Nessus	SuSE Local Security Checks	high
320429	openSUSE 16 Security Update : kernel (openSUSE-SU-2026:20912-1)	Nessus	SuSE Local Security Checks	medium
309818	Linux Distros Unpatched Vulnerability : CVE-2026-31493	Nessus	Misc.	high

Detections

Analytics

CVE-2026-31493

high

Tenable Plugins

high

medium

high