CVE-2026-89849

This vulnerability affects the qla2xxx SCSI driver in the Linux kernel . The root cause is a logic flaw in qla2x00_status_entry(): after filtering out certain SRB types, the code falls through to a SCSI fast path that unconditionally assumes the command is an SRB_SCSI_CMD. Because the srb union o...

CVE-2026-89849 scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path qla2x00statusentry filters out non-TYPESRB entries and the SRBNVMECMD, SRBBIDICMD and SRBTMCMD types, then falls through to a SCSI fast path that assumes the command is ...