CVE-2026-89852

A flaw was found in scsi: qla2xxx. An uninitialized mailbox structure (mbx_cmd_t) can lead to the exposure of kernel stack memory to userspace. This occurs when the qla2x00_get_firmware_state() function copies uninitialized mailbox register values, which are not properly written due to early return paths in qla2x00_mailbox_command(). A local attacker could potentially exploit this to gain sensitive information from the kernel stack.

This vulnerability is rated as Moderate because exploitation requires local system access and occurs only under specific driver failure conditions, limiting the impact to kernel stack information leakage rather than privilege escalation or remote control. In Red Hat Enterprise Linux environments, exposure is restricted to systems equipped with physical QLogic Fibre Channel host bus adapters where the qla2xxx driver is actively in use. Systems without this storage hardware or those where untrusted local users are restricted are not exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.