{"id":"CVE-2026-80647","state":"PUBLISHED","title":"RDMA/hns: Fix warning in poll cq direct mode","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix warning in poll cq direct mode\n\nCQs allocated by ib_alloc_cq() always have a comp_handler. Though\nin direct mode this handler is never expected to be called, it\nis still called when the driver is reset, triggering the following\nWARN_ONCE():\n\nCall trace:\nib_cq_completion_direct+0x38/0x60\nhns_roce_cq_completion+0x54/0x90 (hns_roce_hw_v2]\nhns_roce_handle_device_err+Ox1c8/0x340 [hns_roce_hw_v2]\nhns_roce_hw_v2_uninit_instance.constprop.0+0x34/0x70 [hns_roce_hw_v2]\nhns_roce_hw_v2_reset_notify+0xc4/0xe0 [hns_roce_hw_v2]\nhclge_notify_roce_client+0x60/0xbc [hclge]\nhclge_reset_rebuild+0x48/0x34c [hclge]\nhclge_reset_subtask+0xcc/0xec [hclge]\nhclge_reset_service_task+0x80/0x160 [hclge]\nhclge_service_task+0x50/0x80 (hclge]\nprocess_one_work+0x1cc/0x4d0\nworker_thread+0x154/0x414\nkthread+0x104/0x144\nret_from_fork+0x10/0x18","publishedAt":"2026-08-28T06:48:56.879Z","updatedAt":"2026-08-28T06:48:56.879Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"95b2e44bc1e5c5d93bb58e178d914dd99a3baa6f","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"e7d363c0ffa836ac1d89657686cad241392c5eb2","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"c028c1977b6e61eee26bb69332453efb6513f83b","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"a075a7acd155ffdd058e72eb3f4cce1207ebafa1","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"9f05319149c14acedb83e2c2842ec4b38992ad9f","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"16138ea9833d6bb1bed37a3321f282242704bf02","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"1e56f8886d64288cf88d80af44c7b9148aeaa98b","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"3f19c2a3852e6ba75f3e92dd5edc4e07f3d07f4a","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/infiniband/hw/hns/hns_roce_main.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.5","versionType":"semver"},{"version":"5.10.261","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.212","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.178","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.145","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.97","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.40","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.5","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/infiniband/hw/hns/hns_roce_main.c"]}],"references":["https://git.kernel.org/stable/c/95b2e44bc1e5c5d93bb58e178d914dd99a3baa6f","https://git.kernel.org/stable/c/e7d363c0ffa836ac1d89657686cad241392c5eb2","https://git.kernel.org/stable/c/c028c1977b6e61eee26bb69332453efb6513f83b","https://git.kernel.org/stable/c/a075a7acd155ffdd058e72eb3f4cce1207ebafa1","https://git.kernel.org/stable/c/9f05319149c14acedb83e2c2842ec4b38992ad9f","https://git.kernel.org/stable/c/16138ea9833d6bb1bed37a3321f282242704bf02","https://git.kernel.org/stable/c/1e56f8886d64288cf88d80af44c7b9148aeaa98b","https://git.kernel.org/stable/c/3f19c2a3852e6ba75f3e92dd5edc4e07f3d07f4a"],"weaknesses":[],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/80xxx/CVE-2026-80647.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-80647","state":"PUBLISHED","datePublished":"2026-08-28T06:48:56.879Z","dateUpdated":"2026-08-28T06:48:56.879Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-08-26T14:34:25.779Z"},"containers":{"cna":{"title":"RDMA/hns: Fix warning in poll cq direct mode","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix warning in poll cq direct mode\n\nCQs allocated by ib_alloc_cq() always have a comp_handler. Though\nin direct mode this handler is never expected to be called, it\nis still called when the driver is reset, triggering the following\nWARN_ONCE():\n\nCall trace:\nib_cq_completion_direct+0x38/0x60\nhns_roce_cq_completion+0x54/0x90 (hns_roce_hw_v2]\nhns_roce_handle_device_err+Ox1c8/0x340 [hns_roce_hw_v2]\nhns_roce_hw_v2_uninit_instance.constprop.0+0x34/0x70 [hns_roce_hw_v2]\nhns_roce_hw_v2_reset_notify+0xc4/0xe0 [hns_roce_hw_v2]\nhclge_notify_roce_client+0x60/0xbc [hclge]\nhclge_reset_rebuild+0x48/0x34c [hclge]\nhclge_reset_subtask+0xcc/0xec [hclge]\nhclge_reset_service_task+0x80/0x160 [hclge]\nhclge_service_task+0x50/0x80 (hclge]\nprocess_one_work+0x1cc/0x4d0\nworker_thread+0x154/0x414\nkthread+0x104/0x144\nret_from_fork+0x10/0x18"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"95b2e44bc1e5c5d93bb58e178d914dd99a3baa6f","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"e7d363c0ffa836ac1d89657686cad241392c5eb2","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"c028c1977b6e61eee26bb69332453efb6513f83b","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"a075a7acd155ffdd058e72eb3f4cce1207ebafa1","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"9f05319149c14acedb83e2c2842ec4b38992ad9f","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"16138ea9833d6bb1bed37a3321f282242704bf02","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"1e56f8886d64288cf88d80af44c7b9148aeaa98b","versionType":"git"},{"version":"f295e4cece5cb4c60715fed539abcd62468f9ef1","status":"affected","lessThan":"3f19c2a3852e6ba75f3e92dd5edc4e07f3d07f4a","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/infiniband/hw/hns/hns_roce_main.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.5","versionType":"semver"},{"version":"5.10.261","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.212","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.178","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.145","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.97","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.40","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.5","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/infiniband/hw/hns/hns_roce_main.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/95b2e44bc1e5c5d93bb58e178d914dd99a3baa6f"},{"url":"https://git.kernel.org/stable/c/e7d363c0ffa836ac1d89657686cad241392c5eb2"},{"url":"https://git.kernel.org/stable/c/c028c1977b6e61eee26bb69332453efb6513f83b"},{"url":"https://git.kernel.org/stable/c/a075a7acd155ffdd058e72eb3f4cce1207ebafa1"},{"url":"https://git.kernel.org/stable/c/9f05319149c14acedb83e2c2842ec4b38992ad9f"},{"url":"https://git.kernel.org/stable/c/16138ea9833d6bb1bed37a3321f282242704bf02"},{"url":"https://git.kernel.org/stable/c/1e56f8886d64288cf88d80af44c7b9148aeaa98b"},{"url":"https://git.kernel.org/stable/c/3f19c2a3852e6ba75f3e92dd5edc4e07f3d07f4a"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-08-28T06:48:56.879Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.10.261"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.15.212"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.1.178"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.6.145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.12.97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.18.40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"7.1.5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"7.2"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}