CVE-2026-89855

scsi: qla2xxx: Serialize flash version read in reset handler

State: Published
Severity: Not scored
Published: Sep 16, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Serialize flash version read in reset handler

The "update cache versions without reset" sysfs reset operation (0x20261) calls get_flash_version(), which reads hardware flash registers, without holding ha->optrom_mutex. The VPD update path serializes the same call under optrom_mutex, so this reset path can interleave its flash register accesses with a concurrent VPD or optrom flash operation and corrupt the reads.

Hold ha->optrom_mutex across the get_flash_version() call to match the VPD update path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8c2cf7d4e387d003259488522523807f25576427 to before f1fc052f2a5890ea6dba80d50254dd6258b13386Affected 8c2cf7d4e387d003259488522523807f25576427 to before 31bf2714abbb0aa5a8a03d15038f8920e1c74b21Affected 8c2cf7d4e387d003259488522523807f25576427 to before ae979c549cba684e67b6c047140f3a8d2439b298Affected 8c2cf7d4e387d003259488522523807f25576427 to before 9cef42a073a0bdeee7fb1b47221cda222d330d2aAffected 8c2cf7d4e387d003259488522523807f25576427 to before 75460967619eda720c9a03767729157ffd171d8cAffected 8c2cf7d4e387d003259488522523807f25576427 to before 8d116137119371349fb09685fe05413d8fc92efeAffected 8c2cf7d4e387d003259488522523807f25576427 to before 33735490789e5417851752974c0b1d23125559cdAffected 8c2cf7d4e387d003259488522523807f25576427 to before f606ed93de0c4f1e7e3618779e9fad731455314aAffected
LinuxLinux	3.12Affected before 3.12Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.51 through 6.18.Not affected 7.2.5 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

8c2cf7d4e387d003259488522523807f25576427 to before f1fc052f2a5890ea6dba80d50254dd6258b13386Affected
8c2cf7d4e387d003259488522523807f25576427 to before 31bf2714abbb0aa5a8a03d15038f8920e1c74b21Affected
8c2cf7d4e387d003259488522523807f25576427 to before ae979c549cba684e67b6c047140f3a8d2439b298Affected
8c2cf7d4e387d003259488522523807f25576427 to before 9cef42a073a0bdeee7fb1b47221cda222d330d2aAffected
8c2cf7d4e387d003259488522523807f25576427 to before 75460967619eda720c9a03767729157ffd171d8cAffected
8c2cf7d4e387d003259488522523807f25576427 to before 8d116137119371349fb09685fe05413d8fc92efeAffected
8c2cf7d4e387d003259488522523807f25576427 to before 33735490789e5417851752974c0b1d23125559cdAffected
8c2cf7d4e387d003259488522523807f25576427 to before f606ed93de0c4f1e7e3618779e9fad731455314aAffected

LinuxLinux

3.12Affected
before 3.12Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.51 through 6.18.*Not affected
7.2.5 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.