CVE-2026-89843

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An information leak exists in the qla2xxx SCSI driver where several bsg handlers use an uninitialized 256-byte buffer bsg[DMA POOL SIZE]. When a user-supplied request payload is shorter than the buffer size, the remaining space retains stale stack data. The functions qla2x00 read fru status() and qla2x00 read i2c() subsequently copy the entire buffer back to the reply payload, exposing this uninitialized memory to user space. Additionally, write and update paths may send these uninitialized fields to the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.