SB20261015143 - Reliance on undefined behavior in Linux kernel scsi qla2xxx driver

Description

This security bulletin contains information about 1 vulnerability.

1) Reliance on undefined behavior (CVE-ID: CVE-2026-98386)

CWE-ID: CWE-758 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

CVSSv4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to the use of ordinary memory operations on device I/O memory in the qla2xxx driver's __qla2x00_alloc_iocbs() function when clearing a QLAFX00 request ring slot. A local user can trigger the affected slot-clearing operation to cause a denial of service.

On architectures such as ARM64, a regular memset() may emit unaligned or block-zeroing instructions that are invalid for device memory, resulting in a synchronous external abort.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/53eb96c244d150dfb8cc4b5b0492ab53755f3701
• https://git.kernel.org/stable/c/626e44f3d8a924a97a3848a9fd45833947e081e9
• https://git.kernel.org/stable/c/6ee6dfd922fafd508f6bde16de30dd2db796b7a7
• https://git.kernel.org/stable/c/e41d28d9a242c4005b7d01a7ee7769405a6a2c2e