CVE-2026-89865 | Linux Kernel up to 7.2.4 qla2xxx qla2x00_write_sfp len heap-based overflow

September 16, 2026 Yanac

A vulnerability was found in Linux Kernel up to 7.2.4. It has been classified as critical. The affected element is the function qla2x00_write_sfp of the component qla2xxx. This manipulation of the argument len causes heap-based buffer overflow.

This vulnerability is tracked as CVE-2026-89865. The attack is restricted to local execution. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More