Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-89855 Details

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize flash version read in reset handler The "update cache versions without reset" sysfs reset operation (0x20261) calls get_flash_version(), which reads hardware flash registers, without holding ha->optrom_mutex. The VPD update path serializes the same call under optrom_mutex, so this reset path can interleave its flash register accesses with a concurrent VPD or optrom flash operation and corrupt the reads. Hold ha->optrom_mutex across the get_flash_version() call to match the VPD update path.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/31bf2714abbb0aa5a8a03d15038f8920e1c74b21	kernel.org
https://git.kernel.org/stable/c/33735490789e5417851752974c0b1d23125559cd	kernel.org
https://git.kernel.org/stable/c/75460967619eda720c9a03767729157ffd171d8c	kernel.org
https://git.kernel.org/stable/c/8d116137119371349fb09685fe05413d8fc92efe	kernel.org
https://git.kernel.org/stable/c/9cef42a073a0bdeee7fb1b47221cda222d330d2a	kernel.org
https://git.kernel.org/stable/c/ae979c549cba684e67b6c047140f3a8d2439b298	kernel.org
https://git.kernel.org/stable/c/f1fc052f2a5890ea6dba80d50254dd6258b13386	kernel.org
https://git.kernel.org/stable/c/f606ed93de0c4f1e7e3618779e9fad731455314a	kernel.org

see all 8 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

1 change record found show changes