SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-80625

UNKNOWN · CVSS N/A EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's RDMA/hns component, where a memory leak occurs due to improper handling of bonding resources during concurrent driver removal and reset. This can lead to potential kernel panics, impacting system stability. Organizations utilizing affected Linux systems, particularly those relying on RDMA functionality, should prioritize patching to mitigate these risks.

CVE
CVE-2026-80625
Severity
UNKNOWN
CVSS
N/A
EPSS
0.15%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hns_roce_hw_v2_exit() during driver removal, and then is allocated again in hns_roce_register_device() during driver reset. This leads to memory leak because the release timing has already passed. This may also lead to a kernel panic as below because of the leaked notifier callback: Call trace: 0xffffa20fccc04978 (P) raw_notifier_call_chain+0x20/0x38 call_netdevice_notifiers_info+0x60/0xb8 netdev_lower_state_changed+0x4c/0xb8 As Sashiko suggested, the teardown order of bonding resources should be inverted to make sure the resources are released when the driver is removed.