DEBIAN-CVE-2026-89859

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00dodportdiagnostics allocates the qladportdiag response buffer with kmallocobj non-zeroing and, on success, copies the full sizeofdd back to user space via...

AZL-101171 CVE-2026-89859 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00dodportdiagnostics allocates the qladportdiag response buffer with kmallocobj non-zeroing and, on success, copies the full sizeofdd back to user space via...

CVE-2026-89859

This Linux kernel vulnerability affects the scsi: qla2xxx (QLogic Fibre Channel HBA) driver. In qla2x00_do_dport_diagnostics(), the qla_dport_diag response buffer is allocated with kmalloc_obj() (non-zeroing), but only a subset of the buffer is populated by the user request. The options and unuse...

Linux Distros Unpatched Vulnerability : CVE-2026-89859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00dodportdiagnostics allocates the qladportdiag response buffer with kmallocobj non-zeroing...

PT-2026-93500

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the scsi qla2xxx driver. The function qla2x00 do dport diagnostics uses kmalloc obj to allocate a qla dport diag response buffer without zeroing it. Because...