Riskcovery

CVE-2026-43414

scsi: qla2xxx: Completely fix fcport double free

State
Published
Severity
9.8 Critical
Published
May 8, 2026
Updated
Oct 30, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Completely fix fcport double free

In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcmd_sp_free(). When an error happens, this function is called by qla2x00_sp_release(), when kref_put() releases the first and the last reference.

qla2x00_els_dcmd_sp_free() frees fcport by calling qla2x00_free_fcport(). Doing it one more time after kref_put() is a bad idea.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 3b9d72442adfbc9ddb0f76dd1b03977b3a578b16 to before bb9c7eca6f8f2e4a1cd8ba6711e7efe9044c0327Affected
  • ef23850940d9a52c39936d27254824ccf5e9b6bd to before baabbd29191514391ca81594e43261bd17c6795aAffected
  • 4895009c4bb72f71f2e682f1e7d2c2d96e482087 to before 7172f41786dc08144da4627483e405de57bf8d2cAffected
  • 4895009c4bb72f71f2e682f1e7d2c2d96e482087 to before 4097a2afe8acc6038b71aab825430f1403decf20Affected
  • 4895009c4bb72f71f2e682f1e7d2c2d96e482087 to before d48ea85463f5b34f7b92ea0a13eddf1ab993da7bAffected
  • 4895009c4bb72f71f2e682f1e7d2c2d96e482087 to before c0b7da13a04bd70ef6070bfb9ea85f582294560aAffected
  • 7861213201838480dc222634c56fb6db113d010dAffected
  • 6c6bf6cacf9461f8d301cfac4f9c175d80cbcc63Affected
  • cd10dee1f07a782f5aa05703c55299ca86a85ee4Affected
  • b03e626bd6d3f0684f56ee1890d70fc9ca991c04Affected
  • 282877633b25d67021a34169c5b5519b1d4ef65eAffected
  • f85af9f1aa5e2f53694a6cbe72010f754b5ff862Affected
  • 9b43d2884b54d415caab48878b526dfe2ae9921bAffected
  • 846fb9f112f618ec6ae181d8dae7961652574774Affected
  • 6.1.84 to before 6.1.191Affected
  • 6.6.24 to before 6.6.160Affected
  • 5.15.154 to before 5.16Affected
  • 6.7.12 to before 6.8Affected
  • 6.8.3 to before 6.9Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 6.19.9 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.