CVE-2026-89849 Linux Kernel qla2xxx - Denial of Service

Linux kernel qla2xxx driver contains a wild pointer dereference caused by improper handling of non-SCSI SRB types in the status IOCB fast path, letting attackers cause denial of service, exploit requires crafted firmware input.

CVSS base score 8.8 /10
High
CISA KEV
Not listed
Public exploit
None known
EPSS
0.35% chance of exploitation in 30 days
View the NVD record ↗