CVE-2025-38582

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsvqp rsvqp may be double destroyed in error flow, first in freemrinit, and then in hnsroceexit. Fix it by moving the freemrinit call into hnsrocev2init. listdel corruption, ffff589732eb9b50-ne...

CVE-2024-53226

CVE-2024-53226 affects the Linux kernel RDMA/hns driver. The issue is a NULL pointer dereference in hns_roce_map_mr_sg() when ib_map_mr_sg() accepts NULL as sg_offset, leading to potential crash. Public sources confirm the root cause and that the fix is to validate the NULL pointer before use. De...