CVE-2024-42288 scsi: qla2xxx: Fix for possible memory corruption

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed in SCSI and QEMU Components On February 18, 2026, Microsoft published information on several CVEs affecting SCSI and QEMU components. These vulnerabilities include potential memory corruption in qla2xxx (CVE-2024-42288), a kernel oops issue in qla1280 (CVE-2025-21957), and a dma reentrancy issue in lsi53c895a leading to stack overflow (CVE-2023-0330). The affected components are critical for system stability and performance. 9 sources 46

Extracted Entities

CVEs (1)