CVE-2026-89852

A flaw was found in scsi: qla2xxx. An uninitialized mailbox structure mbxcmdt can lead to the exposure of kernel stack memory to userspace. This occurs when the qla2x00getfirmwarestate function copies uninitialized mailbox register values, which are not properly written due to early return paths ...