CVE-2026-89862

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A resource leak occurs in the qla2xxx driver within the SCSI subsystem. The function qla28xx validate flash image() unconditionally returns QLA SUCCESS, signaling to the FC BSG transport function fc bsg host dispatch() that the driver will handle the request completion. However, the call to bsg job done() is protected by a conditional check if (!rval). When an error occurs (where rval equals -EINVAL), this guard prevents bsg job done() from being executed. Consequently, neither the driver nor the transport completes the job, causing the request to remain active until it times out and leaking block layer resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.