CVE-2026-46265

RDMA/hns: Fix WQ_MEM_RECLAIM warning

High · published June 3, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hns: Fix WQ_MEM_RECLAIM warning

When sunrpc is used, if a reset triggered, our wq may lead the

following trace:

workqueue: WQ_MEM_RECLAIM xprtiod:xprt_rdma_connect_worker [rpcrdma]

is flushing !WQ_MEM_RECLAIM hns_roce_irq_workq:flush_work_handle

[hns_roce_hw_v2]

WARNING: CPU: 0 PID: 8250 at kernel/workqueue.c:2644 check_flush_dependency+0xe0/0x144

Call trace:

check_flush_dependency+0xe0/0x144

start_flush_work.constprop.0+0x1d0/0x2f0

__flush_work.isra.0+0x40/0xb0

flush_work+0x14/0x30

hns_roce_v2_destroy_qp+0xac/0x1e0 [hns_roce_hw_v2]

ib_destroy_qp_user+0x9c/0x2b4

rdma_destroy_qp+0x34/0xb0

rpcrdma_ep_destroy+0x28/0xcc [rpcrdma]

rpcrdma_ep_put+0x74/0xb4 [rpcrdma]

rpcrdma_xprt_disconnect+0x1d8/0x260 [rpcrdma]

xprt_rdma_connect_worker+0xc0/0x120 [rpcrdma]

process_one_work+0x1cc/0x4d0

worker_thread+0x154/0x414

kthread+0x104/0x144

ret_from_fork+0x10/0x18

Since QP destruction frees memory, this wq should have the WQ_MEM_RECLAIM.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00684 · 52.0th percentile
Published
2026-06-03T15:50Z
EPSS history
Timeline
  • 03 JUN 15:50Z
    RDMA/hns: Fix WQ_MEM_RECLAIM warning
    cvelistv5