Description
In the Linux kernel, the following vulnerability has been resolved:

RDMA/hns: Fix warning in poll cq direct mode

CQs allocated by ib_alloc_cq() always have a comp_handler. Though
in direct mode this handler is never expected to be called, it
is still called when the driver is reset, triggering the following
WARN_ONCE():

Call trace:
ib_cq_completion_direct+0x38/0x60
hns_roce_cq_completion+0x54/0x90 (hns_roce_hw_v2]
hns_roce_handle_device_err+Ox1c8/0x340 [hns_roce_hw_v2]
hns_roce_hw_v2_uninit_instance.constprop.0+0x34/0x70 [hns_roce_hw_v2]
hns_roce_hw_v2_reset_notify+0xc4/0xe0 [hns_roce_hw_v2]
hclge_notify_roce_client+0x60/0xbc [hclge]
hclge_reset_rebuild+0x48/0x34c [hclge]
hclge_reset_subtask+0xcc/0xec [hclge]
hclge_reset_service_task+0x80/0x160 [hclge]
hclge_service_task+0x50/0x80 (hclge]
process_one_work+0x1cc/0x4d0
worker_thread+0x154/0x414
kthread+0x104/0x144
ret_from_fork+0x10/0x18
Published: 2026-08-28
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The kernel driver for RDMA devices incorrectly invokes a completion handler when a completion queue is in direct mode. The handler is expected to be absent in this mode, yet it is called during driver reset, producing a WARN_ONCE in the kernel log. This bug does not expose sensitive data or enable arbitrary code execution, but it indicates an incorrect assumption in error handling and may lead to confusion during debugging or rare driver instability during resets.

Affected Systems

The issue applies to Linux kernel drivers for RDMA/hns devices. All releases of the Linux kernel that do not incorporate the patch described in the provided commit references are affected; supported vendor versions are not listed in the data.

Risk and Exploitability

Exploitability is considered low; the EPSS score is not available and the vulnerability is not listed in CISA KEV. No attack vector or known exploitation pathway is documented, so the primary concern is the warning and potential minor instability during device reset rather than a serious security compromise.

Generated by OpenCVE AI on August 28, 2026 at 09:18 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest Linux kernel release that contains the patch referenced in commits 16138ea9833d6bb1bed37a3321f282242704bf02 and related updates.
  • Monitor kernel logs for occurrences of WARN_ONCE related to ib_cq_completion_direct or hns_roce_cq_completion, and investigate any frequent driver resets.
  • Verify that RDMA/hns drivers and BIOS/firmware are up‑to‑date to prevent excessive device resets.

Generated by OpenCVE AI on August 28, 2026 at 09:18 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 28 Aug 2026 09:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-398

Fri, 28 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix warning in poll cq direct mode CQs allocated by ib_alloc_cq() always have a comp_handler. Though in direct mode this handler is never expected to be called, it is still called when the driver is reset, triggering the following WARN_ONCE(): Call trace: ib_cq_completion_direct+0x38/0x60 hns_roce_cq_completion+0x54/0x90 (hns_roce_hw_v2] hns_roce_handle_device_err+Ox1c8/0x340 [hns_roce_hw_v2] hns_roce_hw_v2_uninit_instance.constprop.0+0x34/0x70 [hns_roce_hw_v2] hns_roce_hw_v2_reset_notify+0xc4/0xe0 [hns_roce_hw_v2] hclge_notify_roce_client+0x60/0xbc [hclge] hclge_reset_rebuild+0x48/0x34c [hclge] hclge_reset_subtask+0xcc/0xec [hclge] hclge_reset_service_task+0x80/0x160 [hclge] hclge_service_task+0x50/0x80 (hclge] process_one_work+0x1cc/0x4d0 worker_thread+0x154/0x414 kthread+0x104/0x144 ret_from_fork+0x10/0x18
Title RDMA/hns: Fix warning in poll cq direct mode
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-28T06:48:56.879Z

Reserved: 2026-08-26T14:34:25.779Z

Link: CVE-2026-80647

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-28T08:16:49.677

Modified: 2026-08-28T08:16:49.677

Link: CVE-2026-80647

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T09:30:18Z

Weaknesses