---
id: CVE-2026-89851
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: qla2xxx: Fix FCE trace enable parsing in debugfs

  qla2x00_dfs_fce_write() called kstrtoul() with a NULL result pointer,
  so a successful parse would dereference NU…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: qla2xxx: Fix FCE trace enable parsing in debugfs

  qla2x00_dfs_fce_write() called kstrtoul() with a NULL result pointer,
  so a successful parse would dereference NU…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 3a5a789494875376d1f8063ec5ecc6beafda2ce1 <
    b0c08c08a08b6cca0e7e192bcbe0514e41fcc55f
  - >-
    Linux >= 73d3d3c66f108bc47922490f8500842530139975 <
    9932cbd0b49d0a5ab8378d32650ffb51604ffa35
  - >-
    Linux >= 57c029cab0d908942e3ed9ff9fd0361144d01944 <
    f5e245164d187d1ee227140c8b2e83b67f59c1fd
  - >-
    Linux >= 217230bc8796a922d5b15a9a94ec4414b2d2b3e3 <
    5762d992dddaf301e7fb78f797de407116847121
  - >-
    Linux >= 2cf3c3fe9a11aa168e80c966494c58548b9aed5d <
    eff41f50461c238bd2c5cd20672a5b53e68d493a
  - >-
    Linux >= 841df27d619ee1f5ca6473e15227b39d6136562d <
    7203d4aed8f444e7376c2dee8d93577b37cf9989
  - >-
    Linux >= 841df27d619ee1f5ca6473e15227b39d6136562d <
    aac0d3cb9199121d2ce5906e06f94b793fac1052
  - >-
    Linux >= 841df27d619ee1f5ca6473e15227b39d6136562d <
    b7368687e3d11f51392d3c4774ec0263d5fbf31f
  - Linux a89872a61b914378591f16e428dd221c5e2059b2
  - Linux >= 5.10.235 < 5.10.270
  - Linux >= 5.15.179 < 5.15.221
  - Linux >= 6.1.129 < 6.1.188
  - Linux >= 6.6.78 < 6.6.157
  - Linux >= 6.12.14 < 6.12.110
  - Linux >= 6.13.3 < 6.14
  - Linux 6.14
published: '2026-09-16'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T11:16:52.757'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89851'
references:
  - url: 'https://git.kernel.org/stable/c/5762d992dddaf301e7fb78f797de407116847121'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7203d4aed8f444e7376c2dee8d93577b37cf9989'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9932cbd0b49d0a5ab8378d32650ffb51604ffa35'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/aac0d3cb9199121d2ce5906e06f94b793fac1052'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b0c08c08a08b6cca0e7e192bcbe0514e41fcc55f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b7368687e3d11f51392d3c4774ec0263d5fbf31f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/eff41f50461c238bd2c5cd20672a5b53e68d493a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f5e245164d187d1ee227140c8b2e83b67f59c1fd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-16T10:53:53.994Z'
epss: 0.0022
epssPercentile: 0.11101
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix FCE trace enable parsing in debugfs

qla2x00_dfs_fce_write() called kstrtoul() with a NULL result pointer,
so a successful parse would dereference NULL and oops. Worse, the int
return value (0 on success, negative errno on failure) was assigned to
the unsigned long enable flag, inverting the intended logic: a valid
number was treated as "disable" while a parse failure enabled FCE.

Parse the value into enable and propagate parse errors to userspace.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.