CVE-2026-93242

A flaw was found in the Linux kernel's qla2xxx Fibre Channel driver. When handling multi-entry response packets, an off-by-one counting error causes the driver to consume an extra entry from the response queue. This issue can cause legitimate firmware responses to be prematurely marked as processed and silently dropped, resulting in storage communication failures and a Denial of Service (DoS).

Red Hat rates this vulnerability as having a Low severity impact because it is restricted to systems utilizing QLogic Fibre Channel host bus adapters and does not allow for privilege elevation or arbitrary code execution. The issue manifests under specific multi-entry response conditions where the driver mishandles queue accounting, leading to discarded firmware replies and potential storage communication timeouts. Deployments without the affected storage controller hardware or with the driver unloaded remain completely unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.