CVE-2026-74389RDMA/hns: Fix log flood after cmd_mbox failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix log flood after cmd_mbox failure hns_roce_cmd_mbox() is the command interface between driver and hardware. When hardware is abnormal, the unlimited error printings after hns_roce_cmd_mbox() failure will cause log flood and even system crash. Replace ibdev_err() and ibdev_warn() with their ratelimited versions in the error handling path after hns_roce_cmd_mbox() (and its wrappers hns_roce_create_hw_ctx/hns_roce_destroy_hw_ctx) fails.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 9a4435375cd151e07c0c38fa601b00115986091b builds before 7d9fbee252f84de3e6947a40eec01481c9d8afbb; from 9a4435375cd151e07c0c38fa601b00115986091b before 66f44ec974ab372e4e1ee9eac4245237c94e8f68; from 9a4435375cd151e07c0c38fa601b00115986091b before f3c9e84268e9fa613d40d6c138fb6969c35879b5; from 9a4435375cd151e07c0c38fa601b00115986091b before bbd97d71e53e551890e4115ad9de46b5f2ac0858 | CNA record |
References
- https://git.kernel.org/stable/c/7d9fbee252f84de3e6947a40eec01481c9d8afbb
- https://git.kernel.org/stable/c/66f44ec974ab372e4e1ee9eac4245237c94e8f68
- https://git.kernel.org/stable/c/f3c9e84268e9fa613d40d6c138fb6969c35879b5
- https://git.kernel.org/stable/c/bbd97d71e53e551890e4115ad9de46b5f2ac0858
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.