CVE-2026-74389
Received Received - Intake

RDMA/hns Log Flood Fix in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix log flood after cmd_mbox failure hns_roce_cmd_mbox() is the command interface between driver and hardware. When hardware is abnormal, the unlimited error printings after hns_roce_cmd_mbox() failure will cause log flood and even system crash. Replace ibdev_err() and ibdev_warn() with their ratelimited versions in the error handling path after hns_roce_cmd_mbox() (and its wrappers hns_roce_create_hw_ctx/hns_roce_destroy_hw_ctx) fails.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74389
EUVD
EUVD-2026-59536

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves excessive error logging after a hardware command failure in the RDMA/hns driver. When the hns_roce_cmd_mbox() function fails due to abnormal hardware, the system floods logs with repeated error messages, which can lead to system crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's RDMA/hns driver and involves excessive error logging after hardware command failures. Detection would require checking kernel logs for repeated error messages from hns_roce_cmd_mbox() or related functions. Use commands like 'dmesg | grep hns_roce' or 'journalctl -k | grep -i hns' to search for error logs.

Impact Analysis

The vulnerability can cause system instability by overwhelming the system with log messages, potentially leading to crashes. It may also make troubleshooting difficult due to the flood of error logs masking other issues.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If updating is not immediately possible, monitor system logs for excessive error messages and consider temporarily disabling the RDMA/hns driver if it is not critical to operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74389. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart