Critical 9.8Published May 8, 2026

CVE-2026-43414scsi: qla2xxx: Completely fix fcport double free

Updated under an hour ago (2026-10-19 08:23 UTC)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcmd_sp_free(). When an error happens, this function is called by qla2x00_sp_release(), when kref_put() releases the first and the last reference. qla2x00_els_dcmd_sp_free() frees fcport by calling qla2x00_free_fcport(). Doing it one more time after kref_put() is a bad idea.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 16, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	4895009c4bb72f71f2e682f1e7d2c2d96e482087 builds before 4097a2afe8acc6038b71aab825430f1403decf20; from 4895009c4bb72f71f2e682f1e7d2c2d96e482087 before d48ea85463f5b34f7b92ea0a13eddf1ab993da7b; from 4895009c4bb72f71f2e682f1e7d2c2d96e482087 before c0b7da13a04bd70ef6070bfb9ea85f582294560a; 7861213201838480dc222634c56fb6db113d010d; 3b9d72442adfbc9ddb0f76dd1b03977b3a578b16; ef23850940d9a52c39936d27254824ccf5e9b6bd; 6c6bf6cacf9461f8d301cfac4f9c175d80cbcc63; cd10dee1f07a782f5aa05703c55299ca86a85ee4; and 10 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 5.15.154 before 5.16; from 6.1.84 before 6.2; from 6.6.24 before 6.7; from 6.7.12 before 6.8; from 6.8.3 before 6.9; from 6.9.1 before 6.19.9; 6.9; 6.9; and 8 more ranges	NVD

References

https://git.kernel.org/stable/c/4097a2afe8acc6038b71aab825430f1403decf20
https://git.kernel.org/stable/c/d48ea85463f5b34f7b92ea0a13eddf1ab993da7bpatch
https://git.kernel.org/stable/c/c0b7da13a04bd70ef6070bfb9ea85f582294560apatch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.