CVE-2026-89851 scsi: qla2xxx: Fix FCE trace enable parsing in debugfs
A local attacker with debugfs access can trigger a kernel null pointer dereference in the qla2xxx driver, causing a system crash.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-89851?
CVE-2026-89851 is a vulnerability in Linux, published on 16 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix FCE trace enable parsing in debugfs
qla2x00_dfs_fce_write() called kstrtoul() with a NULL result pointer, so a successful parse would dereference NULL and oops. Worse, the int return value (0 on success, negative errno on failure) was assigned to the unsigned long enable flag, inverting the intended logic: a valid number was treated as "disable" while a parse failure enabled FCE.
Parse the value into enable and propagate parse errors to userspace.
Which versions are affected by CVE-2026-89851?
How do I fix CVE-2026-89851?
Apply the vendor's patch.
Is CVE-2026-89851 being exploited?
There is no known exploitation of CVE-2026-89851 in the wild and no public exploit code.
Sources
Also known as AZL-101399, BELL-CVE-2026-89851, DEBIAN-CVE-2026-89851, GHSA-hwqc-mqvr-m7jg, UBUNTU-CVE-2026-89851.