CVE-2026-74389

Summary

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hns: Fix log flood after cmd_mbox failure

hns_roce_cmd_mbox() is the command interface between driver and hardware. When hardware is abnormal, the unlimited error printings after hns_roce_cmd_mbox() failure will cause log flood and even system crash.

Replace ibdev_err() and ibdev_warn() with their ratelimited versions in the error handling path after hns_roce_cmd_mbox() (and its wrappers hns_roce_create_hw_ctx/hns_roce_destroy_hw_ctx) fails.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9a4435375cd151e07c0c38fa601b00115986091b < 7d9fbee252f84de3e6947a40eec01481c9d8afbbaffected
LinuxLinux9a4435375cd151e07c0c38fa601b00115986091b < 66f44ec974ab372e4e1ee9eac4245237c94e8f68affected
LinuxLinux9a4435375cd151e07c0c38fa601b00115986091b < f3c9e84268e9fa613d40d6c138fb6969c35879b5affected
LinuxLinux9a4435375cd151e07c0c38fa601b00115986091b < bbd97d71e53e551890e4115ad9de46b5f2ac0858affected
LinuxLinux4.9affected
LinuxLinux0 < 4.9unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References