-

CVE-2026-89850

scsi: qla2xxx: Don't query firmware state while chip is down

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Don't query firmware state while chip is down

qla2x00_fw_state_show() initializes rval to QLA_FUNCTION_FAILED and jumps
to the out: label when the chip is down or EEH is busy. The out: block
then re-issued qla2x00_get_firmware_state() because rval != QLA_SUCCESS,
defeating the chip-down/EEH-busy guards and issuing a mailbox command
(outside optrom_mutex) during ISP reset or PCI error recovery, which can
hang the adapter. It also turned a normal in-lock mailbox failure into a
second unsynchronized mailbox attempt.

Make the out: fallback only mark the firmware state as unknown. The
mailbox is now issued at most once, inside optrom_mutex, and only when
the chip is up and not EEH-busy.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version b6faaaf796d7bfb00e32ca5c905d55cc43e89448
Version < 178d984e8875292582e4295cf559b2b11d3c9325
Status affected
Version b6faaaf796d7bfb00e32ca5c905d55cc43e89448
Version < cba780c01f72f8585ca81ad7304097f8b12ef339
Status affected
Version b6faaaf796d7bfb00e32ca5c905d55cc43e89448
Version < 22f44f77da496bc355479c08a0a9dbc9ad42ba42
Status affected
Version b6faaaf796d7bfb00e32ca5c905d55cc43e89448
Version < b6a30baa29695fa0eaba4a3a04435a3c1a5cb63d
Status affected
Version b6faaaf796d7bfb00e32ca5c905d55cc43e89448
Version < 7bc2baed8a3d6a1e2a3f6b78d245f25d1e18a749
Status affected
Version b6faaaf796d7bfb00e32ca5c905d55cc43e89448
Version < a194684853dceaa1d6b7a9a02bc12f479232ad9b
Status affected
Version b6faaaf796d7bfb00e32ca5c905d55cc43e89448
Version < a6374b508893de15fee78583a95f5099d7812e85
Status affected
Version b6faaaf796d7bfb00e32ca5c905d55cc43e89448
Version < e0cebe20dcffbed9c078fe30e2d18cd5046d9eff
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.20
Status affected
Version 0
Version < 4.20
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.116
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/178d984e8875292582e4295cf559b2b11d3c9325
https://git.kernel.org/stable/c/cba780c01f72f8585ca81ad7304097f8b12ef339
https://git.kernel.org/stable/c/22f44f77da496bc355479c08a0a9dbc9ad42ba42
https://git.kernel.org/stable/c/b6a30baa29695fa0eaba4a3a04435a3c1a5cb63d
https://git.kernel.org/stable/c/7bc2baed8a3d6a1e2a3f6b78d245f25d1e18a749
https://git.kernel.org/stable/c/a194684853dceaa1d6b7a9a02bc12f479232ad9b
https://git.kernel.org/stable/c/a6374b508893de15fee78583a95f5099d7812e85
https://git.kernel.org/stable/c/e0cebe20dcffbed9c078fe30e2d18cd5046d9eff