CVE-2026-74389

medium

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix log flood after cmd_mbox failure hns_roce_cmd_mbox() is the command interface between driver and hardware. When hardware is abnormal, the unlimited error printings after hns_roce_cmd_mbox() failure will cause log flood and even system crash. Replace ibdev_err() and ibdev_warn() with their ratelimited versions in the error handling path after hns_roce_cmd_mbox() (and its wrappers hns_roce_create_hw_ctx/hns_roce_destroy_hw_ctx) fails.

References

https://git.kernel.org/stable/c/f3c9e84268e9fa613d40d6c138fb6969c35879b5

https://git.kernel.org/stable/c/bbd97d71e53e551890e4115ad9de46b5f2ac0858

https://git.kernel.org/stable/c/7d9fbee252f84de3e6947a40eec01481c9d8afbb

https://git.kernel.org/stable/c/66f44ec974ab372e4e1ee9eac4245237c94e8f68

Details

Source: Mitre, NVD

Published: 2026-08-15

Updated: 2026-08-17

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00168