CVE-2026-89855
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize flash version read in reset handler The "update cache versions without reset" sysfs reset operation (0x20261) calls get_flash_version(), which reads hardware flash registers, without holding ha->optrom_mutex. The VPD update path serializes the same call under optrom_mutex, so this reset path can interleave its flash register accesses with a concurrent VPD or optrom flash operation and corrupt the reads. Hold ha->optrom_mutex across the get_flash_version() call to match the VPD update path.
How to fix
- Linux Linuxf1fc052f2a5890ea6dba80d50254dd6258b13386, 31bf2714abbb0aa5a8a03d15038f8920e1c74b21, ae979c549cba684e67b6c047140f3a8d2439b298, 9cef42a073a0bdeee7fb1b47221cda222d330d2a, 75460967619eda720c9a03767729157ffd171d8c, 8d116137119371349fb09685fe05413d8fc92efe, 33735490789e5417851752974c0b1d23125559cd, f606ed93de0c4f1e7e3618779e9fad731455314a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8c2cf7d4e387d003259488522523807f25576427 ≤ v < f1fc052f2a5890ea6dba80d50254dd6258b13386, 8c2cf7d4e387d003259488522523807f25576427 ≤ v < 31bf2714abbb0aa5a8a03d15038f8920e1c74b21, 8c2cf7d4e387d003259488522523807f25576427 ≤ v < ae979c549cba684e67b6c047140f3a8d2439b298, 8c2cf7d4e387d003259488522523807f25576427 ≤ v < 9cef42a073a0bdeee7fb1b47221cda222d330d2a, 8c2cf7d4e387d003259488522523807f25576427 ≤ v < 75460967619eda720c9a03767729157ffd171d8c, 8c2cf7d4e387d003259488522523807f25576427 ≤ v < 8d116137119371349fb09685fe05413d8fc92efe, 8c2cf7d4e387d003259488522523807f25576427 ≤ v < 33735490789e5417851752974c0b1d23125559cd, 8c2cf7d4e387d003259488522523807f25576427 ≤ v < f606ed93de0c4f1e7e3618779e9fad731455314a, 3.12 | f1fc052f2a5890ea6dba80d50254dd6258b13386, 31bf2714abbb0aa5a8a03d15038f8920e1c74b21, ae979c549cba684e67b6c047140f3a8d2439b298, 9cef42a073a0bdeee7fb1b47221cda222d330d2a, 75460967619eda720c9a03767729157ffd171d8c, 8d116137119371349fb09685fe05413d8fc92efe, 33735490789e5417851752974c0b1d23125559cd, f606ed93de0c4f1e7e3618779e9fad731455314a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.