CVE-2026-93242
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() qla24xx_process_response_queue() advances ring_ptr past the head IOCB before dispatching, so by the time __qla_consume_iocb() runs, ring_ptr already points at the first continuation IOCB. The function however looped purex->entry_count times starting at ring_ptr. As entry_count includes the head, this consumed one entry too many: it stamped RESPONSE_PROCESSED on the next, unrelated IOCB and advanced the ring past it, silently dropping a legitimate firmware response. The head IOCB's signature was also never marked. Mark the head processed and account for it, then consume only the entry_count - 1 continuation IOCBs, matching __qla_copy_purex_to_buffer().
How to fix
- Linux Linuxa136c311676fd1010b1bde3bcfd410caa2fa040f, d841707fafba5f80341b82e8c3a4c24fc5aa5132, 6e3f129538c32d0019437197735912308c161843, bd1534d4afab47f13dfc27fff6f59dd859a0ac3a, 31715d1e1cbf3a37ce3452635c5602f73fd7abd4, df86c27cf1ba9d66f737a1fa56479c6e7efafe4e, 3ba019bdd89d931499d9476456b5d9c7ab7fa753 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | fac2807946c10b9a509b9c348afd442fa823c5f7 ≤ v < a136c311676fd1010b1bde3bcfd410caa2fa040f, fac2807946c10b9a509b9c348afd442fa823c5f7 ≤ v < d841707fafba5f80341b82e8c3a4c24fc5aa5132, fac2807946c10b9a509b9c348afd442fa823c5f7 ≤ v < 6e3f129538c32d0019437197735912308c161843, fac2807946c10b9a509b9c348afd442fa823c5f7 ≤ v < bd1534d4afab47f13dfc27fff6f59dd859a0ac3a, fac2807946c10b9a509b9c348afd442fa823c5f7 ≤ v < 31715d1e1cbf3a37ce3452635c5602f73fd7abd4, fac2807946c10b9a509b9c348afd442fa823c5f7 ≤ v < df86c27cf1ba9d66f737a1fa56479c6e7efafe4e, fac2807946c10b9a509b9c348afd442fa823c5f7 ≤ v < 3ba019bdd89d931499d9476456b5d9c7ab7fa753, 5.15 | a136c311676fd1010b1bde3bcfd410caa2fa040f, d841707fafba5f80341b82e8c3a4c24fc5aa5132, 6e3f129538c32d0019437197735912308c161843, bd1534d4afab47f13dfc27fff6f59dd859a0ac3a, 31715d1e1cbf3a37ce3452635c5602f73fd7abd4, df86c27cf1ba9d66f737a1fa56479c6e7efafe4e, 3ba019bdd89d931499d9476456b5d9c7ab7fa753 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.