CVE-2026-89844

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the qla2xxx SCSI driver where the qla24xx report id acquisition() function fails to hold the vport slock lock during format-1 handling when calling qla update host map(). This subsequently reaches qla update vp map(), which modifies the ha->host map btree using btree insert32(), btree update32(), or btree remove32(). Because this operation is performed without the required lock, it can lead to race conditions during concurrent host map updates, resulting in btree corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.