Düşük
CVE-2026-90285: CVE-2026-90285: güvenlik açığı
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path qla2x00_sysfs_read_vpd() called ha->isp_ops->read_optrom() a second time after releasing optrom_mutex. The repeated read is redundant and, unlike the first, runs without optrom_mutex held, exposing flash access to concurrent optrom operations. Drop the duplicate call.
Özet bilgiler
- EPSS
- %0,22 (yüzdelik 12)
- Yama
- Yok / bilinmiyor