CVE-2026-80647 RDMA/hns: Fix warning in poll cq direct mode

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix warning in poll cq direct mode CQs allocated by iballoccq always have a comphandler. Though in direct mode this handler is never expected to be called, it is still called when the driver is reset, triggering the...

CVE-2026-74389

A flaw was found in the Linux kernel's RDMA/hns component. When the hardware experiences an abnormality, the hnsrocecmdmbox command interface can fail. This failure leads to an uncontrolled flood of error messages, which can consume system resources and ultimately cause a system crash, resulting ...

CVE-2026-74389

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix log flood after cmdmbox failure hnsrocecmdmbox is the command interface between driver and hardware. When hardware is abnormal, the unlimited error printings after hnsrocecmdmbox failure will cause log flood and eve...

CVE-2025-38582

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsvqp rsvqp may be double destroyed in error flow, first in freemrinit, and then in hnsroceexit. Fix it by moving the freemrinit call into hnsrocev2init. listdel corruption, ffff589732eb9b50-ne...

CVE-2024-53226

CVE-2024-53226 affects the Linux kernel RDMA/hns driver. The issue is a NULL pointer dereference in hns_roce_map_mr_sg() when ib_map_mr_sg() accepts NULL as sg_offset, leading to potential crash. Public sources confirm the root cause and that the fix is to validate the NULL pointer before use. De...