CVE-2026-90285: scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
qla2x00sysfsreadvpd() called ha->ispops->readoptrom() a second time after releasing optrommutex. The repeated read is redundant and, unlike the first, runs without optrommutex held, exposing flash access to concurrent optrom operations. Drop the duplicate call.
Affected Software
Event History
Frequently Asked Questions
What conditions are required for the race to occur?
The qla2x00_sysfs_read_vpd() sysfs read path must run while another optrom operation can access the flash concurrently. The vulnerable behavior is the second read_optrom() call after optrom_mutex has been released.
What change resolves the issue?
The fix removes the redundant second read_optrom() call. This prevents flash access from that sysfs read path from occurring without optrom_mutex held.