PT-2026-98469

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where the FC BSG transport allocates job-request using a user-supplied request len via memdup user. For FC BSG HST VENDOR, the fc bsg host...

CVE-2026-97529: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Validate BSG requestlen before reading vendorcmd The FC BSG transport allocates job-request via memdupuser using the exact user-supplied requestlen. For FCBSGHSTVENDOR, fcbsghostdispatch only guarantees requestlen...

CVE-2026-97529

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Validate BSG requestlen before reading vendorcmd The FC BSG transport allocates job-request via memdupuser using the exact user-supplied requestlen. For FCBSGHSTVENDOR, fcbsghostdispatch only guarantees requestlen...

PT-2026-93503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the qla2xxx driver within the SCSI subsystem. The function qla28xx validate flash image unconditionally returns QLA SUCCESS, signaling to the FC BSG transport...

Linux Distros Unpatched Vulnerability : CVE-2023-54014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Check valid rport returned by fcbsgtorport Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to...

PT-2025-37523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where a pointer, rport, returned from the fc bsg to rport function may be NULL and subsequently dereferenced, potentially leading to issues. The Klocwork...