CVE-2026-89849Published

scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-89849

Published

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "unaffected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "drivers/scsi/qla2xxx/qla_dbg.c",
                        "drivers/scsi/qla2xxx/qla_isr.c"
                    ],
                    "versions": [
                        {
                            "version": "dd30706e73b70d67e88fdaca688db7a3374fd5de",
                            "lessThan": "9204fb0888374083be74f799049649a17eab4191",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "dd30706e73b70d67e88fdaca688db7a3374fd5de",
                            "lessThan": "b7418198b45b327194b97f856fe8ea8daa91f3fd",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "dd30706e73b70d67e88fdaca688db7a3374fd5de",
                            "lessThan": "8f0e31e7a41376abe7d6ca7cbee07fcf9de071e6",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "dd30706e73b70d67e88fdaca688db7a3374fd5de",
                            "lessThan": "e38041b47c29316ba79b645e2ae0b713d216b1db",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "dd30706e73b70d67e88fdaca688db7a3374fd5de",
                            "lessThan": "e93aa3c5125d9a4352ac0fa8ba4a7f8f87881805",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "dd30706e73b70d67e88fdaca688db7a3374fd5de",
                            "lessThan": "29f1f9ad9e354cd0b6e4f6fc75ba09162d6a04d9",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "dd30706e73b70d67e88fdaca688db7a3374fd5de",
                            "lessThan": "0f41d07d72f2245208c45374ca8d0a1846cad667",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ]
                }

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "affected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "drivers/scsi/qla2xxx/qla_dbg.c",
                        "drivers/scsi/qla2xxx/qla_isr.c"
                    ],
                    "versions": [
                        {
                            "version": "5.15",
                            "status": "affected"
                        },
                        {
                            "version": "0",
                            "lessThan": "5.15",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.15.221",
                            "lessThanOrEqual": "5.15.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.1.188",
                            "lessThanOrEqual": "6.1.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.6.157",
                            "lessThanOrEqual": "6.6.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.12.110",
                            "lessThanOrEqual": "6.12.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.18.51",
                            "lessThanOrEqual": "6.18.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.2.5",
                            "lessThanOrEqual": "7.2.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.3",
                            "lessThanOrEqual": "*",
                            "status": "unaffected",
                            "versionType": "original_commit_for_fix"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON