CVE-2026-93242

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the scsi qla2xxx driver where the qla consume iocb() function over-consumes the response queue. This occurs because qla24xx process response queue() advances the ring ptr past the head I/O Control Block (IOCB) before dispatching. Since the function loops based on purex->entry count, which includes the head, it consumes one entry too many. This results in the next unrelated IOCB being marked as RESPONSE PROCESSED and the ring advancing past it, causing a legitimate firmware response to be silently dropped. Additionally, the head IOCB signature is not marked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.