PT-2026-6129 · Qla2Xxx+3 · Qla2Xxx+3
Published
2026-01-01
·
Updated
2026-05-22
·
CVE-2026-23059
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw within the scsi subsystem, specifically in the qla2xxx driver. The
qla27xx copy fpin pkt() and qla27xx copy multiple pkt() functions use the frame size reported by firmware to determine the length of data to copy into the iocb member of the purex item structure. However, iocb is a fixed-size 64-byte array. If frame size exceeds 64 bytes, the memcpy calls will write beyond the bounds of the iocb member, causing a buffer overflow. This is considered unsafe and may trigger warnings when CONFIG FORTIFY SOURCE is enabled. The issue is addressed by limiting the total bytes value to the size of the iocb member (64 bytes) before allocation and copying, ensuring data remains within the structure's boundaries.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Ubuntu
Qla27Xx
Qla2Xxx