CVE-2026-89845

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL dereference occurs in the qla2x00 error entry() function due to a double-read of ha->req q map[que]. The function reads the map slot once for a NULL check and a second time when assigning it to req. If qla25xx free req que() clears the slot to NULL between these two reads during queue teardown, the req variable becomes NULL and is subsequently dereferenced. This happens because the response-queue interrupt driving the function remains registered while the slot is cleared.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.