Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Drivers: Net: qlcnic: Fixed a potential memory leak in qlcnicsriovinit. If the vpalloc function fails in qlcnicsriovinit, all previously allocated vp resources must be freed...

CVE-2026-90112

A flaw was found in the qlcnic driver in the Linux kernel. This vulnerability occurs due to insufficient validation of unified ROM sections when processing firmware files. A local attacker could provide a specially crafted or truncated firmware image, leading the driver to read beyond its allocat...

SUSE CVE-2026-90112

In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loading The unified ROM parser reads directory, product, and data-descriptor fields from the firmware file. Existing validation forms table and data ends with unchecked additions...

Linux Distros Unpatched Vulnerability : CVE-2026-90112

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: qlcnic: validate unified ROM sections before loading The unified ROM parser reads directory, product, and data-descriptor fields from the firmware file...

AZL-102842 CVE-2026-90112 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loading The unified ROM parser reads directory, product, and data-descriptor fields from the firmware file. Existing validation forms table and data ends with unchecked additions...

DEBIAN-CVE-2026-90112

In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loading The unified ROM parser reads directory, product, and data-descriptor fields from the firmware file. Existing validation forms table and data ends with unchecked additions...

CVE-2026-90112

In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loading The unified ROM parser reads directory, product, and data-descriptor fields from the firmware file. Existing validation forms table and data ends with unchecked additions...

EUVD-2026-81705

In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loading The unified ROM parser reads directory, product, and data-descriptor fields from the firmware file. Existing validation forms table and data ends with unchecked additions...

CVE-2026-90112 net: qlcnic: validate unified ROM sections before loading

In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loading The unified ROM parser reads directory, product, and data-descriptor fields from the firmware file. Existing validation forms table and data ends with unchecked additions...

CVE-2026-90112 net: qlcnic: validate unified ROM sections before loading

In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loading The unified ROM parser reads directory, product, and data-descriptor fields from the firmware file. Existing validation forms table and data ends with unchecked additions...

CVE-2026-90112

CVE-2026-90112 affects the qlcnic network driver in the Linux kernel . The unified ROM parser performs unchecked additions and multiplications when forming table and data boundaries, allowing malformed firmware values to wrap before being compared with the firmware size. Additionally, the loader ...

CVE-2026-90112: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loading The unified ROM parser reads directory, product, and data-descriptor fields from the firmware file. Existing validation forms table and data ends with unchecked additions...

PT-2026-94460

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The unified ROM parser in the qlcnic driver fails to properly validate directory, product, and data-descriptor fields within firmware files. The validation process uses unchecked additio...

Linux kernel security vulnerabilities

The Linux kernel contains a security vulnerability stemming from the fact that the unified ROM parser in the qlcnic driver fails to adequately validate ROM sections prior to loading. This results in unchecked addition and multiplication operations, as well as dereferencing of pointers at location...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: qlcnic: Prevent “dbc use-after-free” in qlcnicdcbenable. The “adapter-dcb” pointer would be silently freed within qlcnicdcbenable if qlcnicdcbattach returns an error—something that always occurs under OOM conditions. This could...

WS-2021-0564

net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004836 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit If vp alloc failed in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004833)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004833 advisory. In the Linux kernel, the following vulnerability has been resolved: qlcnic: prevent -dcb use-after-free on qlcnicdcbenable failure adapter-dcb would get silently fre...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992761 advisory. In the Linux kernel, the following vulnerability has been resolved: qlcnic: prevent -dcb use-after-free on qlcnicdcbenable failure adapter-dcb would get silently fre...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993041 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit If vp alloc failed in...