CVE-2026-80625
Received Received - Intake

RDMA/hns Memory Leak in Linux Kernel

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hns_roce_hw_v2_exit() during driver removal, and then is allocated again in hns_roce_register_device() during driver reset. This leads to memory leak because the release timing has already passed. This may also lead to a kernel panic as below because of the leaked notifier callback: Call trace: 0xffffa20fccc04978 (P) raw_notifier_call_chain+0x20/0x38 call_netdevice_notifiers_info+0x60/0xb8 netdev_lower_state_changed+0x4c/0xb8 As Sashiko suggested, the teardown order of bonding resources should be inverted to make sure the resources are released when the driver is removed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-08-28
AI Q&A
2026-08-28
EPSS Evaluated
N/A
NVD
CVE-2026-80625
EUVD
EUVD-2026-67501

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the RDMA/hns driver. During concurrent driver removal and reset, bonding resources are improperly released and reallocated, causing a leak. This can lead to a kernel panic due to a leaked notifier callback.

Detection Guidance

This vulnerability is specific to the Linux kernel's RDMA/hns driver and involves a memory leak during driver removal and reset. Detection requires checking for kernel logs indicating bonding resource leaks or kernel panics related to notifier callbacks. Monitor system logs for errors like 'raw_notifier_call_chain' or 'call_netdevice_notifiers_info' during driver operations.

Impact Analysis

This vulnerability may cause system instability, including kernel panics, due to memory leaks and improper resource handling. It could lead to crashes or unexpected behavior in systems using the affected RDMA/hns driver.

Mitigation Strategies

Apply the latest kernel patches that address this issue. Avoid concurrent driver removal and reset operations. If affected, restart the system to clear leaked resources. Monitor for kernel panics or memory leaks in RDMA/hns driver logs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80625. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart