CVE-2026-74389

Not scored yetLast modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hns: Fix log flood after cmd_mbox failure

hns_roce_cmd_mbox() is the command interface between driver and hardware. When hardware is abnormal, the unlimited error printings after hns_roce_cmd_mbox() failure will cause log flood and even system crash.

Replace ibdev_err() and ibdev_warn() with their ratelimited versions in the error handling path after hns_roce_cmd_mbox() (and its wrappers hns_roce_create_hw_ctx/hns_roce_destroy_hw_ctx) fails.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 9a4435375cd151e07c0c38fa601b00115986091b, < a194e535019e0b32831f16b0eafd83c54d57ccbb; >= 9a4435375cd151e07c0c38fa601b00115986091b, < a6c5f5d98719e69228512390d5db3bf4b6468064; >= 9a4435375cd151e07c0c38fa601b00115986091b, < 7d9fbee252f84de3e6947a40eec01481c9d8afbb; >= 9a4435375cd151e07c0c38fa601b00115986091b, < 66f44ec974ab372e4e1ee9eac4245237c94e8f68; >= 9a4435375cd151e07c0c38fa601b00115986091b, < f3c9e84268e9fa613d40d6c138fb6969c35879b5; >= 9a4435375cd151e07c0c38fa601b00115986091b, < bbd97d71e53e551890e4115ad9de46b5f2ac0858
LinuxLinux4.9

References

Timeline

Published
Aug 15, 2026
Last modified
Oct 30, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-74394.4AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing applicatiCVE-2026-743907.8In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs The irdCVE-2026-74391In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seq_buf The synthetic fielCVE-2026-74392In the Linux kernel, the following vulnerability has been resolved: dm: limit target bio polling to one shot dm_poll_bio() is the ->poll_bCVE-2026-74393In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Commit 18226bCVE-2026-743949.8In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate data length check imm_bufCVE-2026-74395In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference MLX5_IB_MECVE-2026-743967.5In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure mlx5r_umr_updatCVE-2026-743977.8In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier CVE-2026-743989.8In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDADCVE-2026-74399In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm_xattrs read buffer evm_read_xattrs() CVE-2026-74400In the Linux kernel, the following vulnerability has been resolved: bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries
CVE-2026-74389: Unscored | Vulnix