CVE-2026-89855

CVE-2026-89855 affects the qla2xxx SCSI driver in the Linux kernel. The "update cache versions without reset" sysfs reset operation (0x20261) calls get_flash_version() to read hardware flash registers without holding ha->optrom_mutex , allowing it to interleave with concurrent VPD or optrom fl...

EUVD-2026-80455

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize flash version read in reset handler The "update cache versions without reset" sysfs reset operation 0x20261 calls getflashversion, which reads hardware flash registers, without holding ha-optrommutex. The...

CVE-2026-89850

CVE-2026-89850 affects the Linux kernel qla2xxx SCSI driver . In qla2x00_fw_state_show(), when the chip is down or EEH is busy, rval is set to QLA_FUNCTION_FAILED and execution jumps to the out: label, which then re-issues qla2x00_get_firmware_state() because rval != QLA_SUCCESS. This defeats the...