CVE-2026-89849

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the qla2xxx driver where the qla2x00 status entry() function fails to properly validate SCSI Request Blocks (SRB) before they enter the SCSI fast path. The function filters certain types but allows others to fall through to a path that assumes the command is an SRB SCSI CMD. Because the srb u union overlays the SCSI command pointer with other layouts, an unexpected STATUS TYPE IOCB for a non-SCSI handle can cause sp->u.scmd.cmd to be read as a non-NULL garbage pointer. This bypasses NULL checks in qla chk edif rx sa delete pending() and subsequent tests, potentially leading to a wild pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.