CVE-2026-89850

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This issue arises when the system attempts to check the firmware status of the qla2xxx chip while it is not operational or is recovering from an error. This can cause the system to repeatedly send a command to the hardware, which may result in the adapter becoming unresponsive. This could lead to a Denial of Service (DoS), making the affected system unavailable.

This vulnerability is rated as Moderate because exploitation requires local access and is limited to causing a denial of service by hanging the storage adapter, with no impact on confidentiality or integrity. The issue only affects environments equipped with QLogic Fibre Channel host bus adapters running the qla2xxx driver. Triggering the condition necessitates querying device status specifically while the hardware is undergoing an error recovery or reset state, which presents a constrained window of exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.