scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
Summary
| CVE | CVE-2026-90285 |
|---|
| State | PUBLISHED |
|---|
| Assigner | Linux |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2026-09-17 17:17:25 UTC |
|---|
| Updated | 2026-09-17 17:17:25 UTC |
|---|
| Description | In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
qla2x00_sysfs_read_vpd() called ha->isp_ops->read_optrom() a second time
after releasing optrom_mutex. The repeated read is redundant and, unlike
the first, runs without optrom_mutex held, exposing flash access to
concurrent optrom operations. Drop the duplicate call. |
|---|
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|
| CNA |
Linux |
Linux |
affected 5fa8774c7f38c79f38b672c1a0db0c049da477d6 ea79c01ef23c2ec3ace8a98ada517d56763814c2 git |
Not specified |
| CNA |
Linux |
Linux |
affected 5fa8774c7f38c79f38b672c1a0db0c049da477d6 beaf45d9a10e7c1de86dcd1cbc8dc17f930444f7 git |
Not specified |
| CNA |
Linux |
Linux |
affected 5fa8774c7f38c79f38b672c1a0db0c049da477d6 abe224e7077ae5d47f1208430ede4d99ae310627 git |
Not specified |
| CNA |
Linux |
Linux |
affected 5fa8774c7f38c79f38b672c1a0db0c049da477d6 9b6325fc58ab877ecb97fc5642a39e071c343315 git |
Not specified |
| CNA |
Linux |
Linux |
affected 5fa8774c7f38c79f38b672c1a0db0c049da477d6 95e1ad3f19dfec09eb4f4273cf7079fd9b35cee6 git |
Not specified |
| CNA |
Linux |
Linux |
affected 5fa8774c7f38c79f38b672c1a0db0c049da477d6 067504c00fe175864652764308922d99e199828f git |
Not specified |
| CNA |
Linux |
Linux |
affected 5fa8774c7f38c79f38b672c1a0db0c049da477d6 0e4b5f8cad67eabf98da3f90b6443dcea5783ff3 git |
Not specified |
| CNA |
Linux |
Linux |
affected 5fa8774c7f38c79f38b672c1a0db0c049da477d6 5cbc49d5c4cd20c18041e86958103045216d2190 git |
Not specified |
| CNA |
Linux |
Linux |
affected 5.2 |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.2 semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.10.270 5.10.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.15.221 5.15.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.1.188 6.1.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.6.157 6.6.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.12.110 6.12.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.18.52 6.18.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.2.6 7.2.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.3-rc1 * original_commit_for_fix |
Not specified |
References
| Reference | Source | Link | Tags |
|---|
| git.kernel.org/stable/c/abe224e7077ae5d47f1208430ede4d99ae310627 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/9b6325fc58ab877ecb97fc5642a39e071c343315 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/95e1ad3f19dfec09eb4f4273cf7079fd9b35cee6 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/ea79c01ef23c2ec3ace8a98ada517d56763814c2 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/0e4b5f8cad67eabf98da3f90b6443dcea5783ff3 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/5cbc49d5c4cd20c18041e86958103045216d2190 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/beaf45d9a10e7c1de86dcd1cbc8dc17f930444f7 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/067504c00fe175864652764308922d99e199828f |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.