CVE-2026-74389

A flaw was found in the Linux kernel's RDMA/hns component. When the hardware experiences an abnormality, the hns_roce_cmd_mbox() command interface can fail. This failure leads to an uncontrolled flood of error messages, which can consume system resources and ultimately cause a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate severity because it requires physical deployment of specialized HiSilicon RDMA hardware, with exploitation triggered by abnormal hardware conditions rather than direct unprivileged remote invocation. Standard Red Hat Enterprise Linux systems do not load or utilize this driver unless configured on platforms containing HiSilicon RoCE adapters. While unconstrained error logging from command mailbox failures can saturate system resources and cause an availability impact, the blast radius is restricted to local denial of service on systems hosting the affected hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.