Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-43414

scsi: qla2xxx: Completely fix fcport double free

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcmd_sp_free(). When an error happens, this function is called by qla2x00_sp_release(), when kref_put() releases the first and the last reference. qla2x00_els_dcmd_sp_free() frees fcport by calling qla2x00_free_fcport(). Doing it one more time after kref_put() is a bad idea.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3b9d72442adfbc9ddb0f76dd1b03977b3a578b16 to < bb9c7eca6f8f2e4a1cd8ba6711e7efe9044c0327affected
  • ef23850940d9a52c39936d27254824ccf5e9b6bd to < baabbd29191514391ca81594e43261bd17c6795aaffected
  • 4895009c4bb72f71f2e682f1e7d2c2d96e482087 to < 7172f41786dc08144da4627483e405de57bf8d2caffected
  • 4895009c4bb72f71f2e682f1e7d2c2d96e482087 to < 4097a2afe8acc6038b71aab825430f1403decf20affected
  • 4895009c4bb72f71f2e682f1e7d2c2d96e482087 to < d48ea85463f5b34f7b92ea0a13eddf1ab993da7baffected
  • 4895009c4bb72f71f2e682f1e7d2c2d96e482087 to < c0b7da13a04bd70ef6070bfb9ea85f582294560aaffected
  • 7861213201838480dc222634c56fb6db113d010daffected
  • 6c6bf6cacf9461f8d301cfac4f9c175d80cbcc63affected
  • cd10dee1f07a782f5aa05703c55299ca86a85ee4affected
  • b03e626bd6d3f0684f56ee1890d70fc9ca991c04affected
  • 282877633b25d67021a34169c5b5519b1d4ef65eaffected
  • f85af9f1aa5e2f53694a6cbe72010f754b5ff862affected
  • 9b43d2884b54d415caab48878b526dfe2ae9921baffected
  • 846fb9f112f618ec6ae181d8dae7961652574774affected
  • 6.1.84 to < 6.1.191affected
  • 6.6.24 to < 6.6.160affected
  • 5.15.154 to < 5.16affected
  • 6.7.12 to < 6.8affected
  • 6.8.3 to < 6.9affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.18.57 to ≤ 6.18.*unaffected
  • 6.19.9 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References