---
id: CVE-2026-89855
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: qla2xxx: Serialize flash version read in reset handler

  The "update cache versions without reset" sysfs reset operation (0x20261)
  calls get_flash_version(), which…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: qla2xxx: Serialize flash version read in reset handler

  The "update cache versions without reset" sysfs reset operation (0x20261)
  calls get_flash_version(), which…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 8c2cf7d4e387d003259488522523807f25576427 <
    f1fc052f2a5890ea6dba80d50254dd6258b13386
  - >-
    Linux >= 8c2cf7d4e387d003259488522523807f25576427 <
    31bf2714abbb0aa5a8a03d15038f8920e1c74b21
  - >-
    Linux >= 8c2cf7d4e387d003259488522523807f25576427 <
    ae979c549cba684e67b6c047140f3a8d2439b298
  - >-
    Linux >= 8c2cf7d4e387d003259488522523807f25576427 <
    9cef42a073a0bdeee7fb1b47221cda222d330d2a
  - >-
    Linux >= 8c2cf7d4e387d003259488522523807f25576427 <
    75460967619eda720c9a03767729157ffd171d8c
  - >-
    Linux >= 8c2cf7d4e387d003259488522523807f25576427 <
    8d116137119371349fb09685fe05413d8fc92efe
  - >-
    Linux >= 8c2cf7d4e387d003259488522523807f25576427 <
    33735490789e5417851752974c0b1d23125559cd
  - >-
    Linux >= 8c2cf7d4e387d003259488522523807f25576427 <
    f606ed93de0c4f1e7e3618779e9fad731455314a
  - Linux 3.12
published: '2026-09-16'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T11:16:53.313'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89855'
references:
  - url: 'https://git.kernel.org/stable/c/31bf2714abbb0aa5a8a03d15038f8920e1c74b21'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/33735490789e5417851752974c0b1d23125559cd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/75460967619eda720c9a03767729157ffd171d8c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8d116137119371349fb09685fe05413d8fc92efe'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9cef42a073a0bdeee7fb1b47221cda222d330d2a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ae979c549cba684e67b6c047140f3a8d2439b298'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f1fc052f2a5890ea6dba80d50254dd6258b13386'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f606ed93de0c4f1e7e3618779e9fad731455314a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-16T10:53:53.992Z'
epss: 0.0022
epssPercentile: 0.11145
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Serialize flash version read in reset handler

The "update cache versions without reset" sysfs reset operation (0x20261)
calls get_flash_version(), which reads hardware flash registers, without
holding ha->optrom_mutex. The VPD update path serializes the same call
under optrom_mutex, so this reset path can interleave its flash register
accesses with a concurrent VPD or optrom flash operation and corrupt the
reads.

Hold ha->optrom_mutex across the get_flash_version() call to match the
VPD update path.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.