CVE-2026-89858

CVE-2026-89858 affects the Linux kernel's qla2xxx SCSI driver in the function qla2x00_update_fru_versions(). A user-supplied BSG request is copied into a fixed 256-byte stack buffer , and the loop iteration count (list->count) is taken directly from user input with no upper bound , while only ...

EUVD-2026-80458

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00updatefruversions qla2x00updatefruversions copies the user-supplied BSG request into a fixed 256-byte stack buffer bsgDMAPOOLSIZE and then iterates list-count times over the...