Not yet scoredPublished Aug 15, 2026

CVE-2026-74389RDMA/hns: Fix log flood after cmd_mbox failure

Updated under an hour ago (Oct 27, 2026, 12:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix log flood after cmd_mbox failure hns_roce_cmd_mbox() is the command interface between driver and hardware. When hardware is abnormal, the unlimited error printings after hns_roce_cmd_mbox() failure will cause log flood and even system crash. Replace ibdev_err() and ibdev_warn() with their ratelimited versions in the error handling path after hns_roce_cmd_mbox() (and its wrappers hns_roce_create_hw_ctx/hns_roce_destroy_hw_ctx) fails.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 9a4435375cd151e07c0c38fa601b00115986091b before a6c5f5d98719e69228512390d5db3bf4b6468064; 9a4435375cd151e07c0c38fa601b00115986091b builds before 7d9fbee252f84de3e6947a40eec01481c9d8afbb; from 9a4435375cd151e07c0c38fa601b00115986091b before 66f44ec974ab372e4e1ee9eac4245237c94e8f68; from 9a4435375cd151e07c0c38fa601b00115986091b before f3c9e84268e9fa613d40d6c138fb6969c35879b5; from 9a4435375cd151e07c0c38fa601b00115986091b before bbd97d71e53e551890e4115ad9de46b5f2ac0858	CNA record

References

References

https://git.kernel.org/stable/c/a6c5f5d98719e69228512390d5db3bf4b6468064
https://git.kernel.org/stable/c/7d9fbee252f84de3e6947a40eec01481c9d8afbb
https://git.kernel.org/stable/c/66f44ec974ab372e4e1ee9eac4245237c94e8f68
https://git.kernel.org/stable/c/f3c9e84268e9fa613d40d6c138fb6969c35879b5
https://git.kernel.org/stable/c/bbd97d71e53e551890e4115ad9de46b5f2ac0858

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.