CVE-2026-23059
Buffer Overflow in Linux qla2xxx Driver Causes Memory Corruption
Publication date: 2026-02-04
Last updated on: 2026-02-04
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel's qla2xxx driver, specifically in the functions qla27xx_copy_fpin_pkt() and qla27xx_copy_multiple_pkt(). The issue arises because the frame_size reported by firmware is used to determine how much data to copy into a fixed-size 64-byte array called iocb within the purex_item structure.
If the frame_size exceeds 64 bytes, the memcpy operation will overflow the iocb array boundary, potentially writing into adjacent memory. Although extra memory might be allocated, this cross-member write is unsafe and triggers warnings under the CONFIG_FORTIFY_SOURCE security feature.
The vulnerability was fixed by capping the total bytes copied to the size of the iocb member (64 bytes), ensuring that all copies remain within the bounds of the destination structure member.
How can this vulnerability impact me? :
This vulnerability can lead to memory corruption due to buffer overflow when copying data beyond the fixed-size array boundary. Such memory corruption can cause system instability, crashes, or potentially allow an attacker to execute arbitrary code or escalate privileges if exploited.
Additionally, the unsafe memory writes trigger security warnings under CONFIG_FORTIFY_SOURCE, indicating a potential security risk.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know