Skip to content
Heist/ feed
Unrated

scsi: qla2xxx: Don't query firmware state while chip is down

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Don't query firmware state while chip is down qla2x00_fw_state_show() initializes rval to QLA_FUNCTION_FAILED and jumps to the out: label when the chip is down or EEH is busy. The out: block then re-issued qla2x00_get_firmware_state() because rval != QLA_SUCCESS, defeating the chip-down/EEH-busy guards and issuing a mailbox command (outside optrom_mutex) during ISP reset or PCI error recovery, which can hang the adapter. It also turned a normal in-lock mailbox failure into a second unsynchronized mailbox attempt. Make the out: fallback only mark the firmware state as unknown. The mailbox is now issued at most once, inside optrom_mutex, and only when the chip is up and not EEH-busy.

Announced Source revision 1
Original source ↗

CVE-2026-89850

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-89850

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "b6faaaf796d7bfb00e32ca5c905d55cc43e89448",
        "lessThan": "178d984e8875292582e4295cf559b2b11d3c9325",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "b6faaaf796d7bfb00e32ca5c905d55cc43e89448",
        "lessThan": "cba780c01f72f8585ca81ad7304097f8b12ef339",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "b6faaaf796d7bfb00e32ca5c905d55cc43e89448",
        "lessThan": "22f44f77da496bc355479c08a0a9dbc9ad42ba42",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "b6faaaf796d7bfb00e32ca5c905d55cc43e89448",
        "lessThan": "b6a30baa29695fa0eaba4a3a04435a3c1a5cb63d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "b6faaaf796d7bfb00e32ca5c905d55cc43e89448",
        "lessThan": "7bc2baed8a3d6a1e2a3f6b78d245f25d1e18a749",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "b6faaaf796d7bfb00e32ca5c905d55cc43e89448",
        "lessThan": "a194684853dceaa1d6b7a9a02bc12f479232ad9b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "b6faaaf796d7bfb00e32ca5c905d55cc43e89448",
        "lessThan": "a6374b508893de15fee78583a95f5099d7812e85",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "b6faaaf796d7bfb00e32ca5c905d55cc43e89448",
        "lessThan": "e0cebe20dcffbed9c078fe30e2d18cd5046d9eff",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/scsi/qla2xxx/qla_attr.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "4.20"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "4.20",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.10.270",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.221",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.188",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.157",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.110",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.18.51",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "7.2.5",
        "versionType": "semver",
        "lessThanOrEqual": "7.2.*"
      },
      {
        "status": "unaffected",
        "version": "7.3",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/scsi/qla2xxx/qla_attr.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-89850

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#36301 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement