SB2026081575 - Logging of Excessive Data in Linux kernel hw hns driver

Description

This security bulletin contains information about 1 vulnerability.

1) Logging of Excessive Data (CVE-ID: CVE-2026-74389)

CWE-ID: CWE-779 - Logging of Excessive Data

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper restriction of excessive logging in the hns roce rdma driver command error handling path when command mailbox failures are repeatedly triggered during hardware context operations. A local user can trigger repeated command failures to cause a denial of service.

The issue can lead to log flooding after command mailbox failures and may result in a system crash when the hardware is abnormal.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/66f44ec974ab372e4e1ee9eac4245237c94e8f68
• https://git.kernel.org/stable/c/7d9fbee252f84de3e6947a40eec01481c9d8afbb
• https://git.kernel.org/stable/c/bbd97d71e53e551890e4115ad9de46b5f2ac0858
• https://git.kernel.org/stable/c/f3c9e84268e9fa613d40d6c138fb6969c35879b5