CVE-2026-90112

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The unified ROM parser in the qlcnic driver fails to properly validate directory, product, and data-descriptor fields within firmware files. The validation process uses unchecked additions and multiplications, allowing malformed values to wrap before being compared to the firmware size. Additionally, the parser dereferences typed pointers at offsets controlled by the firmware. Because the loader reads a fixed-size bootloader and the version parser assumes a specific 17-byte tail, a truncated image can cause the driver to read beyond the allocated firmware memory during validation or loading.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.