{"id":"CVE-2026-74389","title":"RDMA/hns: Fix log flood after cmd_mbox failure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix log flood after cmd_mbox failure\n\nhns_roce_cmd_mbox() is the command interface between driver and\nhardware. When hardware is abnormal, the unlimited error…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < a6c5f5d98719e69228512390d5db3bf4b6468064","Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < 7d9fbee252f84de3e6947a40eec01481c9d8afbb","Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < 66f44ec974ab372e4e1ee9eac4245237c94e8f68","Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < f3c9e84268e9fa613d40d6c138fb6969c35879b5","Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < bbd97d71e53e551890e4115ad9de46b5f2ac0858","Linux 4.9"],"published":"2026-08-15","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:45:37.231Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-74389","references":[{"url":"https://git.kernel.org/stable/c/a6c5f5d98719e69228512390d5db3bf4b6468064"},{"url":"https://git.kernel.org/stable/c/7d9fbee252f84de3e6947a40eec01481c9d8afbb"},{"url":"https://git.kernel.org/stable/c/66f44ec974ab372e4e1ee9eac4245237c94e8f68"},{"url":"https://git.kernel.org/stable/c/f3c9e84268e9fa613d40d6c138fb6969c35879b5"},{"url":"https://git.kernel.org/stable/c/bbd97d71e53e551890e4115ad9de46b5f2ac0858"}],"tags":["cve.org"],"epss":0.00168,"epssPercentile":0.05749,"ingestedAt":"2026-10-21T12:48:53.581Z","slug":"CVE-2026-74389","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix log flood after cmd_mbox failure\n\nhns_roce_cmd_mbox() is the command interface between driver and\nhardware. When hardware is abnormal, the unlimited error printings\nafter hns_roce_cmd_mbox() failure will cause log flood and even\nsystem crash.\n\nReplace ibdev_err() and ibdev_warn() with their ratelimited versions\nin the error handling path after hns_roce_cmd_mbox() (and its wrappers\nhns_roce_create_hw_ctx/hns_roce_destroy_hw_ctx) fails.\n\n## Affected\n\n- `Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < a6c5f5d98719e69228512390d5db3bf4b6468064`\n- `Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < 7d9fbee252f84de3e6947a40eec01481c9d8afbb`\n- `Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < 66f44ec974ab372e4e1ee9eac4245237c94e8f68`\n- `Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < f3c9e84268e9fa613d40d6c138fb6969c35879b5`\n- `Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < bbd97d71e53e551890e4115ad9de46b5f2ac0858`\n- `Linux 4.9`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}