Critical 9.8Published May 8, 2026

CVE-2026-43414scsi: qla2xxx: Completely fix fcport double free

Updated under an hour ago (Oct 27, 2026, 10:40 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcmd_sp_free(). When an error happens, this function is called by qla2x00_sp_release(), when kref_put() releases the first and the last reference. qla2x00_els_dcmd_sp_free() frees fcport by calling qla2x00_free_fcport(). Doing it one more time after kref_put() is a bad idea.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-415
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ef23850940d9a52c39936d27254824ccf5e9b6bd before baabbd29191514391ca81594e43261bd17c6795a; 4895009c4bb72f71f2e682f1e7d2c2d96e482087 builds before 7172f41786dc08144da4627483e405de57bf8d2c; 4895009c4bb72f71f2e682f1e7d2c2d96e482087 builds before 4097a2afe8acc6038b71aab825430f1403decf20; from 4895009c4bb72f71f2e682f1e7d2c2d96e482087 before d48ea85463f5b34f7b92ea0a13eddf1ab993da7b; from 4895009c4bb72f71f2e682f1e7d2c2d96e482087 before c0b7da13a04bd70ef6070bfb9ea85f582294560a; 7861213201838480dc222634c56fb6db113d010d; 3b9d72442adfbc9ddb0f76dd1b03977b3a578b16; 6c6bf6cacf9461f8d301cfac4f9c175d80cbcc63; and 11 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 5.15.154 before 5.16; from 6.1.84 before 6.2; from 6.6.24 before 6.7; from 6.7.12 before 6.8; from 6.8.3 before 6.9; from 6.9.1 before 6.19.9; 6.9; 6.9; and 8 more ranges	NVD

References

References

https://git.kernel.org/stable/c/baabbd29191514391ca81594e43261bd17c6795a
https://git.kernel.org/stable/c/7172f41786dc08144da4627483e405de57bf8d2c
https://git.kernel.org/stable/c/4097a2afe8acc6038b71aab825430f1403decf20
https://git.kernel.org/stable/c/d48ea85463f5b34f7b92ea0a13eddf1ab993da7b	patch
https://git.kernel.org/stable/c/c0b7da13a04bd70ef6070bfb9ea85f582294560a	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.