The Linux kernel RDMA/hns driver contains a fault in the hns_roce_cmd_mbox error handling path: when hardware reports an abnormal condition, the driver repeatedly invokes ibdev_err() and ibdev_warn() without any rate limiting. This behavior floods the system log with identical error messages and may consume kernel log buffers or disk space, potentially leading to a crash or performance degradation. The recent fix replaces these calls with their rate‑limited counterparts, preventing excessive logging.

All Linux kernel releases that ship with the hns_roce RDMA driver before the commit introducing the patch are affected. Systems using older kernels that include RDMA hardware and have the hns_roce module loaded are at risk regardless of the Linux distribution.

The CVSS score of 5.5 reflects a moderate severity with medium availability impact. The EPSS score is below 1% and the vulnerability is not listed in the CISA KEV catalog, indicating a low likelihood of widespread exploitation. The attack vector is local to the RDMA driver and is triggered automatically when the hardware enters an abnormal state; the absence of rate limiting means that once this condition occurs, log flooding ensues and the denial‑of‑service consequences follow.