Type Confusion in Linux kernel - CVE-2026-89849
Published: September 17, 2026
Vulnerability identifier: #VU150435
CSH Severity: High
CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-89849
CWE-ID: CWE-843
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause a wild pointer dereference.
The vulnerability exists due to type confusion in the qla2x00_status_entry() SCSI fast path when processing an unexpected STATUS_TYPE IOCB for a non-SCSI handle. A remote attacker can cause an unexpected STATUS_TYPE IOCB for a non-SCSI handle to be processed to cause a wild pointer dereference.
Affected software
Linux kernel
How to mitigate CVE-2026-89849
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/0f41d07d72f2245208c45374ca8d0a1846cad667
- https://git.kernel.org/stable/c/29f1f9ad9e354cd0b6e4f6fc75ba09162d6a04d9
- https://git.kernel.org/stable/c/8f0e31e7a41376abe7d6ca7cbee07fcf9de071e6
- https://git.kernel.org/stable/c/9204fb0888374083be74f799049649a17eab4191
- https://git.kernel.org/stable/c/b7418198b45b327194b97f856fe8ea8daa91f3fd
- https://git.kernel.org/stable/c/e38041b47c29316ba79b645e2ae0b713d216b1db
- https://git.kernel.org/stable/c/e93aa3c5125d9a4352ac0fa8ba4a7f8f87881805