VULNERABILITY INTELLIGENCE
CVE-2026-90285
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-09-17
Last modified2026-10-19
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path qla2x00_sysfs_read_vpd() called ha->isp_ops->read_optrom() a second time after releasing optrom_mutex. The repeated read is redundant and, unlike the first, runs without optrom_mutex held, exposing flash access to concurrent optrom operations. Drop the duplicate call.