Към съдържанието
Търсене

CVE-2026-89845: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() qla2x00_error_entry() reads ha->req_q_map[que] twice: once for the NULL check and again when assigning it to req. The map slot is cleared by qla25xx_free_req_que() (ha->req_q_map[que_id] = NULL under mq_lock) during queue teardown, while the response-queue interrupt that drives qla2x00_error_entry() is still registered (the IRQ is released later in qla25xx_free_rsp_que()). If the slot is set to NULL between the two reads, req becomes NULL and is dereferenced. Read the slot once into req and NULL-check the local before use. mq_lock is a mutex and cannot be taken from interrupt context, so the single read plus local check is the appropriate fix for the reported NULL dereference.

    Засегнати продукти

    • Linux Linux: a6fe35c052c4fdd1e8e21251f14eea0bd4bbd25b преди c845f2597787ef70159a32566669e308b2807a56; a6fe35c052c4fdd1e8e21251f14eea0bd4bbd25b преди fe04b31e386aee4cc3a18f07462af146037dc389; a6fe35c052c4fdd1e8e21251f14eea0bd4bbd25b преди 1b995cf4157465357d66ba096e7cdaafab9972e7; a6fe35c052c4fdd1e8e21251f14eea0bd4bbd25b преди d79376fbd2a076de82c1cd8aa0b600b300c75a44; a6fe35c052c4fdd1e8e21251f14eea0bd4bbd25b преди 1c90b74e484ba48f31944fe04963d99e01ac3767; a6fe35c052c4fdd1e8e21251f14eea0bd4bbd25b преди 5dd9bec8004ba93cee8b689bf54ce294f59e5e3c; a6fe35c052c4fdd1e8e21251f14eea0bd4bbd25b преди 35124cfa9898b2088ee72859e573e0876aff66fc; a6fe35c052c4fdd1e8e21251f14eea0bd4bbd25b преди deb8abde83a799d2501f3977f6d6051000253f5e
    • Linux Linux: 3.4; преди 3.4; 5.10.270 до 5.10.*; 5.15.221 до 5.15.*; 6.1.188 до 6.1.*; 6.6.157 до 6.6.*; 6.12.110 до 6.12.*; 6.18.51 до 6.18.*; 7.2.5 до 7.2.*; 7.3 до *

    История

    • 16 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-89845: Linux | freedomonline.bg