CVE-2026-80647

A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) HNS driver. When the driver undergoes a reset, a completion queue handler is unexpectedly called, even though it is not intended to be active in its current operating mode. This incorrect invocation leads to the system issuing a kernel warning, which could indicate unexpected behavior or potential instability.

A moderate-severity flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) HNS (hns_roce) driver. Completion queues allocated via ib_alloc_cq() in direct mode are never expected to invoke their completion handler; however, when the device undergoes a reset, the driver's device-error handling path still calls this handler, triggering a WARN_ONCE() kernel warning. The consequence is a kernel warning that indicates unexpected driver behavior and possible system instability. Red Hat rates this flaw with a CVSS 3.1 score of 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), a local, low-privilege issue affecting availability only. All Red Hat products currently in scope are not affected: Red Hat Enterprise Linux 6, 7, 8, 9, and 10 (kernel and kernel-rt) and Red Hat In-Vehicle OS 2.0 and 2.1 (kernel and kernel-ivos-qualcomm) are all marked not affected because the vulnerable code is not present in the shipped kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.