An RDMA driver bug causes a completion handler to be invoked for a completion queue operating in direct mode, which contradicts the driver’s expectation that the handler should never be called in that mode. This leads to a WARN_ONCE in the kernel log during a device reset, signaling an unexpected event but not exposing any vulnerabilities that would allow code execution or data disclosure. The weakness falls under CWE-663, reflecting improper validation of control flow.

The issue affects the Linux kernel, specifically the RDMA/hns device drivers shipped with the standard Linux distribution. No precise kernel version numbers are listed; the vulnerability applies to any kernel that includes the RDMA/hns driver implementation as currently found in the stable tree.

The CVSS score of 5.5 indicates medium severity, while the EPSS score of less than 1% indicates a very low likelihood of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. The only practical impact is a kernel warning logged during a device reset, which may signal driver instability but does not provide a remote code execution or data disclosure vector. The likely attack vector is a scenario that forces an RDMA device reset, causing the WARN_ONCE message to appear. No publicly documented exploitation pathway exists.