CVE-2026-89857

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the qla2xxx SCSI driver where the qla nvme ls reject iocb() function fails to acquire the necessary lock when allocating from and advancing the request ring. This occurs when the function is called by qla nvme xmt ls rsp() on its error path and qla2xxx process purls pkt() from the purex work/DPC context. Because both callers use ha->base qpair without holding the qp lock ptr (which is the hardware lock), they can execute concurrently with normal I/O submissions on the base ring. This concurrency can corrupt the ring producer state, potentially resulting in dropped or duplicated commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.