---
id: CVE-2026-74389
title: 'RDMA/hns: Fix log flood after cmd_mbox failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/hns: Fix log flood after cmd_mbox failure

  hns_roce_cmd_mbox() is the command interface between driver and
  hardware. When hardware is abnormal, the unlimited error…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 9a4435375cd151e07c0c38fa601b00115986091b <
    a6c5f5d98719e69228512390d5db3bf4b6468064
  - >-
    Linux >= 9a4435375cd151e07c0c38fa601b00115986091b <
    7d9fbee252f84de3e6947a40eec01481c9d8afbb
  - >-
    Linux >= 9a4435375cd151e07c0c38fa601b00115986091b <
    66f44ec974ab372e4e1ee9eac4245237c94e8f68
  - >-
    Linux >= 9a4435375cd151e07c0c38fa601b00115986091b <
    f3c9e84268e9fa613d40d6c138fb6969c35879b5
  - >-
    Linux >= 9a4435375cd151e07c0c38fa601b00115986091b <
    bbd97d71e53e551890e4115ad9de46b5f2ac0858
  - Linux 4.9
published: '2026-08-15'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:45:37.231Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-74389'
references:
  - url: 'https://git.kernel.org/stable/c/a6c5f5d98719e69228512390d5db3bf4b6468064'
  - url: 'https://git.kernel.org/stable/c/7d9fbee252f84de3e6947a40eec01481c9d8afbb'
  - url: 'https://git.kernel.org/stable/c/66f44ec974ab372e4e1ee9eac4245237c94e8f68'
  - url: 'https://git.kernel.org/stable/c/f3c9e84268e9fa613d40d6c138fb6969c35879b5'
  - url: 'https://git.kernel.org/stable/c/bbd97d71e53e551890e4115ad9de46b5f2ac0858'
tags:
  - cve.org
epss: 0.00168
epssPercentile: 0.05749
ingestedAt: '2026-10-21T12:48:53.581Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hns: Fix log flood after cmd_mbox failure

hns_roce_cmd_mbox() is the command interface between driver and
hardware. When hardware is abnormal, the unlimited error printings
after hns_roce_cmd_mbox() failure will cause log flood and even
system crash.

Replace ibdev_err() and ibdev_warn() with their ratelimited versions
in the error handling path after hns_roce_cmd_mbox() (and its wrappers
hns_roce_create_hw_ctx/hns_roce_destroy_hw_ctx) fails.

## Affected

- `Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < a6c5f5d98719e69228512390d5db3bf4b6468064`
- `Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < 7d9fbee252f84de3e6947a40eec01481c9d8afbb`
- `Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < 66f44ec974ab372e4e1ee9eac4245237c94e8f68`
- `Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < f3c9e84268e9fa613d40d6c138fb6969c35879b5`
- `Linux >= 9a4435375cd151e07c0c38fa601b00115986091b < bbd97d71e53e551890e4115ad9de46b5f2ac0858`
- `Linux 4.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.