Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Zero-initialized BSG stack buffers are used to avoid information leaks. Several BSG handlers store their requests/responses in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE, and fill it using...

CVE-2026-89843

CVE-2026-89843 affects the Linux kernel scsi: qla2xxx driver (QLogic). Several bsg handlers use an uninitialized 256-byte on-stack buffer (uint8_t bsg[DMA_POOL_SIZE]) that is filled via sg_copy_to_buffer(), which copies only the user-supplied request length. When the request is shorter than the s...

CVE-2026-89843 scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE and fill it via sgcopytobuffer, which only copies as...