Search: CVE-2026-89846

A vulnerability in the Linux kernel's qla2xxx SCSI driver allows out-of-bounds reading of sense-data due to improper handling of rsp_info_len, a length value taken from the target's FCP response. This can lead to memory disclosure by leaking adjacent response-ring or heap memory into the command's sense buffer. The issue arises when rsp_info_len is larger than the IOCB data area size, causing an unsigned integer underflow and out-of-bounds memory access. The vulnerability has been fixed by clamping rsp_info_len to prevent underflow and out-of-bounds reads.