Numeric Truncation Error in Linux kernel - CVE-2026-89856
Published: September 17, 2026
Vulnerability identifier: #VU150429
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-89856
CWE-ID: CWE-197
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to corrupt memory or cause a denial of service.
The vulnerability exists due to numeric truncation in the qla2xxx MSI-X queue-count calculation when deriving queue counts from MSI-X vector counts. A remote attacker can cause a zero queue count to be used for queue allocation to corrupt memory or cause a denial of service.
Target mode can also underflow the queue count after decrementing it.
Affected software
Linux kernel
How to mitigate CVE-2026-89856
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/2efe50b2da829909023de4a2eb87badb7cfa53cc
- https://git.kernel.org/stable/c/33c77254e6e91f37c72c7fad4051777452b10de8
- https://git.kernel.org/stable/c/7a448f5ed0b283dbde4e9183dd1e98c221432dab
- https://git.kernel.org/stable/c/802068b9b683b8008fcccbf6e9ad133e597ec87c
- https://git.kernel.org/stable/c/9eeddbeaa896f39d943644b16d83a6ad0ceab255
- https://git.kernel.org/stable/c/cf623d32761b00f221a9cfded3303d56e84b429d
- https://git.kernel.org/stable/c/e80adfeac61b4d5db7ffe0f5af43999c33a4145e
- https://git.kernel.org/stable/c/ebfd35c64433821bd5619a6d07ccc2df8b5b1de3