-

CVE-2026-93242

scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()

qla24xx_process_response_queue() advances ring_ptr past the head IOCB
before dispatching, so by the time __qla_consume_iocb() runs, ring_ptr
already points at the first continuation IOCB. The function however
looped purex->entry_count times starting at ring_ptr. As entry_count
includes the head, this consumed one entry too many: it stamped
RESPONSE_PROCESSED on the next, unrelated IOCB and advanced the ring
past it, silently dropping a legitimate firmware response. The head
IOCB's signature was also never marked.

Mark the head processed and account for it, then consume only the
entry_count - 1 continuation IOCBs, matching __qla_copy_purex_to_buffer().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version fac2807946c10b9a509b9c348afd442fa823c5f7
Version < a136c311676fd1010b1bde3bcfd410caa2fa040f
Status affected
Version fac2807946c10b9a509b9c348afd442fa823c5f7
Version < d841707fafba5f80341b82e8c3a4c24fc5aa5132
Status affected
Version fac2807946c10b9a509b9c348afd442fa823c5f7
Version < 6e3f129538c32d0019437197735912308c161843
Status affected
Version fac2807946c10b9a509b9c348afd442fa823c5f7
Version < bd1534d4afab47f13dfc27fff6f59dd859a0ac3a
Status affected
Version fac2807946c10b9a509b9c348afd442fa823c5f7
Version < 31715d1e1cbf3a37ce3452635c5602f73fd7abd4
Status affected
Version fac2807946c10b9a509b9c348afd442fa823c5f7
Version < df86c27cf1ba9d66f737a1fa56479c6e7efafe4e
Status affected
Version fac2807946c10b9a509b9c348afd442fa823c5f7
Version < 3ba019bdd89d931499d9476456b5d9c7ab7fa753
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version 0
Version < 5.15
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.117
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/a136c311676fd1010b1bde3bcfd410caa2fa040f
https://git.kernel.org/stable/c/d841707fafba5f80341b82e8c3a4c24fc5aa5132
https://git.kernel.org/stable/c/6e3f129538c32d0019437197735912308c161843
https://git.kernel.org/stable/c/bd1534d4afab47f13dfc27fff6f59dd859a0ac3a
https://git.kernel.org/stable/c/31715d1e1cbf3a37ce3452635c5602f73fd7abd4
https://git.kernel.org/stable/c/df86c27cf1ba9d66f737a1fa56479c6e7efafe4e
https://git.kernel.org/stable/c/3ba019bdd89d931499d9476456b5d9c7ab7fa753