{"id":"CVE-2026-93242","summary":"scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()\n\nqla24xx_process_response_queue() advances ring_ptr past the head IOCB\nbefore dispatching, so by the time __qla_consume_iocb() runs, ring_ptr\nalready points at the first continuation IOCB. The function however\nlooped purex-\u003eentry_count times starting at ring_ptr. As entry_count\nincludes the head, this consumed one entry too many: it stamped\nRESPONSE_PROCESSED on the next, unrelated IOCB and advanced the ring\npast it, silently dropping a legitimate firmware response. The head\nIOCB's signature was also never marked.\n\nMark the head processed and account for it, then consume only the\nentry_count - 1 continuation IOCBs, matching __qla_copy_purex_to_buffer().","modified":"2026-09-25T03:48:54.436532662Z","published":"2026-09-24T15:40:26.570Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93242.json"},"references":[{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"},{"type":"WEB","url":"https://git.kernel.org/stable/c/31715d1e1cbf3a37ce3452635c5602f73fd7abd4"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3ba019bdd89d931499d9476456b5d9c7ab7fa753"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6e3f129538c32d0019437197735912308c161843"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a136c311676fd1010b1bde3bcfd410caa2fa040f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bd1534d4afab47f13dfc27fff6f59dd859a0ac3a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d841707fafba5f80341b82e8c3a4c24fc5aa5132"},{"type":"WEB","url":"https://git.kernel.org/stable/c/df86c27cf1ba9d66f737a1fa56479c6e7efafe4e"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93242.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93242"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"fac2807946c10b9a509b9c348afd442fa823c5f7"},{"fixed":"a136c311676fd1010b1bde3bcfd410caa2fa040f"},{"fixed":"d841707fafba5f80341b82e8c3a4c24fc5aa5132"},{"fixed":"6e3f129538c32d0019437197735912308c161843"},{"fixed":"bd1534d4afab47f13dfc27fff6f59dd859a0ac3a"},{"fixed":"31715d1e1cbf3a37ce3452635c5602f73fd7abd4"},{"fixed":"df86c27cf1ba9d66f737a1fa56479c6e7efafe4e"},{"fixed":"3ba019bdd89d931499d9476456b5d9c7ab7fa753"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93242.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.15.0"},{"fixed":"5.15.221"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.188"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.157"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.110"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.51"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93242.json"}}],"schema_version":"1.9.0"}