Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-90285

scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path qla2x00_sysfs_read_vpd() called ha->isp_ops->read_optrom() a second time after releasing optrom_mutex. The repeated read is redundant and, unlike the first, runs without optrom_mutex held, exposing flash access to concurrent optrom operations. Drop the duplicate call.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5fa8774c7f38c79f38b672c1a0db0c049da477d6 to < ea79c01ef23c2ec3ace8a98ada517d56763814c2affected
  • 5fa8774c7f38c79f38b672c1a0db0c049da477d6 to < beaf45d9a10e7c1de86dcd1cbc8dc17f930444f7affected
  • 5fa8774c7f38c79f38b672c1a0db0c049da477d6 to < abe224e7077ae5d47f1208430ede4d99ae310627affected
  • 5fa8774c7f38c79f38b672c1a0db0c049da477d6 to < 9b6325fc58ab877ecb97fc5642a39e071c343315affected
  • 5fa8774c7f38c79f38b672c1a0db0c049da477d6 to < 95e1ad3f19dfec09eb4f4273cf7079fd9b35cee6affected
  • 5fa8774c7f38c79f38b672c1a0db0c049da477d6 to < 067504c00fe175864652764308922d99e199828faffected
  • 5fa8774c7f38c79f38b672c1a0db0c049da477d6 to < 0e4b5f8cad67eabf98da3f90b6443dcea5783ff3affected
  • 5fa8774c7f38c79f38b672c1a0db0c049da477d6 to < 5cbc49d5c4cd20c18041e86958103045216d2190affected

Linux Linux

Default version status: affected

  • 5.2affected
  • 0 to < 5.2unaffected
  • 5.10.270 to ≤ 5.10.*unaffected
  • 5.15.221 to ≤ 5.15.*unaffected
  • 6.1.188 to ≤ 6.1.*unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References