-

CVE-2026-89855

scsi: qla2xxx: Serialize flash version read in reset handler

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Serialize flash version read in reset handler

The "update cache versions without reset" sysfs reset operation (0x20261)
calls get_flash_version(), which reads hardware flash registers, without
holding ha->optrom_mutex. The VPD update path serializes the same call
under optrom_mutex, so this reset path can interleave its flash register
accesses with a concurrent VPD or optrom flash operation and corrupt the
reads.

Hold ha->optrom_mutex across the get_flash_version() call to match the
VPD update path.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 8c2cf7d4e387d003259488522523807f25576427
Version < f1fc052f2a5890ea6dba80d50254dd6258b13386
Status affected
Version 8c2cf7d4e387d003259488522523807f25576427
Version < 31bf2714abbb0aa5a8a03d15038f8920e1c74b21
Status affected
Version 8c2cf7d4e387d003259488522523807f25576427
Version < ae979c549cba684e67b6c047140f3a8d2439b298
Status affected
Version 8c2cf7d4e387d003259488522523807f25576427
Version < 9cef42a073a0bdeee7fb1b47221cda222d330d2a
Status affected
Version 8c2cf7d4e387d003259488522523807f25576427
Version < 75460967619eda720c9a03767729157ffd171d8c
Status affected
Version 8c2cf7d4e387d003259488522523807f25576427
Version < 8d116137119371349fb09685fe05413d8fc92efe
Status affected
Version 8c2cf7d4e387d003259488522523807f25576427
Version < 33735490789e5417851752974c0b1d23125559cd
Status affected
Version 8c2cf7d4e387d003259488522523807f25576427
Version < f606ed93de0c4f1e7e3618779e9fad731455314a
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.12
Status affected
Version 0
Version < 3.12
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.117
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/f1fc052f2a5890ea6dba80d50254dd6258b13386
https://git.kernel.org/stable/c/31bf2714abbb0aa5a8a03d15038f8920e1c74b21
https://git.kernel.org/stable/c/ae979c549cba684e67b6c047140f3a8d2439b298
https://git.kernel.org/stable/c/9cef42a073a0bdeee7fb1b47221cda222d330d2a
https://git.kernel.org/stable/c/75460967619eda720c9a03767729157ffd171d8c
https://git.kernel.org/stable/c/8d116137119371349fb09685fe05413d8fc92efe
https://git.kernel.org/stable/c/33735490789e5417851752974c0b1d23125559cd
https://git.kernel.org/stable/c/f606ed93de0c4f1e7e3618779e9fad731455314a