CVE-2026-89851

A flaw was found in the Linux kernel's qla2xxx SCSI driver. An issue in the qla2x00_dfs_fce_write() function, responsible for parsing Fibre Channel over Ethernet (FCE) trace enable settings in debugfs, could lead to a null pointer dereference. A local attacker with access to debugfs could trigger this flaw, causing a kernel panic and system crash. Additionally, incorrect handling of return values could inadvertently enable FCE tracing.

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because exploitation requires local administrative access or access to debugfs, which is restricted to privileged users by default. Furthermore, the issue only affects systems equipped with QLogic Fibre Channel Host Bus Adapters that have the qla2xxx driver loaded. Because debugfs interfaces are intended solely for debugging and diagnostics under elevated privileges, the risk of unprivileged local denial of service is negligible in standard production environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.