CVE-2026-90285
- Source
- https://cve.org/CVERecord?id=CVE-2026-90285
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90285.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-90285
- Downstream
- Published
- 2026-09-17T16:08:14Z
- Modified
- 2026-09-19T03:47:25Z
- Summary
- scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
qla2x00_sysfs_read_vpd() called ha->isp_ops->read_optrom() a second time after releasing optrom_mutex. The repeated read is redundant and, unlike the first, runs without optrom_mutex held, exposing flash access to concurrent optrom operations. Drop the duplicate call.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90285.json" }- References
-
- https://git.kernel.org/stable/c/067504c00fe175864652764308922d99e199828f
- https://git.kernel.org/stable/c/0e4b5f8cad67eabf98da3f90b6443dcea5783ff3
- https://git.kernel.org/stable/c/5cbc49d5c4cd20c18041e86958103045216d2190
- https://git.kernel.org/stable/c/95e1ad3f19dfec09eb4f4273cf7079fd9b35cee6
- https://git.kernel.org/stable/c/9b6325fc58ab877ecb97fc5642a39e071c343315
- https://git.kernel.org/stable/c/abe224e7077ae5d47f1208430ede4d99ae310627
- https://git.kernel.org/stable/c/beaf45d9a10e7c1de86dcd1cbc8dc17f930444f7
- https://git.kernel.org/stable/c/ea79c01ef23c2ec3ace8a98ada517d56763814c2
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90285.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-90285
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5fa8774c7f38c79f38b672c1a0db0c049da477d6Fixedea79c01ef23c2ec3ace8a98ada517d56763814c2Fixedbeaf45d9a10e7c1de86dcd1cbc8dc17f930444f7Fixedabe224e7077ae5d47f1208430ede4d99ae310627Fixed9b6325fc58ab877ecb97fc5642a39e071c343315Fixed95e1ad3f19dfec09eb4f4273cf7079fd9b35cee6Fixed067504c00fe175864652764308922d99e199828fFixed0e4b5f8cad67eabf98da3f90b6443dcea5783ff3Fixed5cbc49d5c4cd20c18041e86958103045216d2190
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced5.2.0Fixed5.10.270
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.221
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.188
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.157
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.110
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.52
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.2.6