CVE-2026-97535

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write exists in the scsi qla2xxx driver. The qla25xx ctrlvp iocb() function calculates a map index using the vp index variable and writes to the vp idx map array without verifying if the index remains within the array boundaries. Because max npiv vports can be as high as 255, a vp index exceeding 128 results in a write of up to 16 bytes beyond the vp idx map array. This can lead to the corruption of trailing IOCB fields or adjacent request-ring slots. The issue occurs specifically when the vp index cannot be represented in the IOCB bitmap.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.