https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:28:53 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89855 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>scsi: qla2xxx: Serialize flash version read in reset handler</p> <p>The &#34;update cache versions without reset&#34; sysfs reset operation (0x20261) calls get_flash_version(), which reads hardware flash registers, without holding ha-&gt;optrom_mutex. The VPD update path serializes the same call under optrom_mutex, so this reset path can interleave its flash register accesses with a concurrent VPD or optrom flash operation and corrupt the reads.</p> <p>Hold ha-&gt;optrom_mutex across the get_flash_version() call to match the VPD update path.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>scsi: qla2xxx: Serialize flash version read in reset handler</p> <p>The &#34;update cache versions without reset&#34; sysfs reset operation (0x20261) calls get_flash_version(), which reads hardware flash registers, without holding ha-&gt;optrom_mutex. The VPD update path serializes the same call under optrom_mutex, so this reset path can interleave its flash register accesses with a concurrent VPD or optrom flash operation and corrupt the reads.</p> <p>Hold ha-&gt;optrom_mutex across the get_flash_version() call to match the VPD update path.</p> https://vulnerability.circl.lu/vuln/cve-2026-89855