8.1

CVE-2026-89861

scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()

In the format 1 path, the virtual port is located on ha->vp_list while
holding vport_slock, but the lock is dropped before vp is used:
qla_update_host_map() is called and VP_IDX_ACQUIRED/REGISTER_FC4_NEEDED/
REGISTER_FDMI_NEEDED are set on vp. No reference is taken across that
window, so a concurrent qla24xx_deallocate_vp_id() can tear the vport
down and free it, leading to a use-after-free.

Take a vport reference (vref_count) under vport_slock when the matching
vp is found, and drop it after the last use of
vp. qla24xx_deallocate_vp_id() waits for vref_count to reach zero before
unlinking and freeing the vport, so the pointer stays valid. This
matches the reference idiom already used by the other ha->vp_list
traversals.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 2c3dfe3f6ad8daff5acdb01713e4f2b116e78136
Version < d09ef32af1e05d79f29b460521a20bc4e6fd2ecf
Status affected
Version 2c3dfe3f6ad8daff5acdb01713e4f2b116e78136
Version < 4b7f0a95bfeb1d3673da4c29bbe9872a61bc1a69
Status affected
Version 2c3dfe3f6ad8daff5acdb01713e4f2b116e78136
Version < 267533b28ddf2c9223d30ad7e6960fa9e936428e
Status affected
Version 2c3dfe3f6ad8daff5acdb01713e4f2b116e78136
Version < f8d2eb510c063a8ca79a5dc766a4303d3925fe83
Status affected
Version 2c3dfe3f6ad8daff5acdb01713e4f2b116e78136
Version < f6b3bcc7cb2f4c37464958b9fd97dc7f185ea297
Status affected
Version 2c3dfe3f6ad8daff5acdb01713e4f2b116e78136
Version < 47272152a13d202d98496208f9bf382c1cf4d4fb
Status affected
Version 2c3dfe3f6ad8daff5acdb01713e4f2b116e78136
Version < d556f899964d184e6cb788f3fa9dcddcafe1ab2d
Status affected
Version 2c3dfe3f6ad8daff5acdb01713e4f2b116e78136
Version < 793cedee296fd819bfadc2a7ec4d52faf9c09a0a
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.23
Status affected
Version 0
Version < 2.6.23
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.57% 0.46
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/d09ef32af1e05d79f29b460521a20bc4e6fd2ecf
https://git.kernel.org/stable/c/4b7f0a95bfeb1d3673da4c29bbe9872a61bc1a69
https://git.kernel.org/stable/c/267533b28ddf2c9223d30ad7e6960fa9e936428e
https://git.kernel.org/stable/c/f8d2eb510c063a8ca79a5dc766a4303d3925fe83
https://git.kernel.org/stable/c/f6b3bcc7cb2f4c37464958b9fd97dc7f185ea297
https://git.kernel.org/stable/c/47272152a13d202d98496208f9bf382c1cf4d4fb
https://git.kernel.org/stable/c/d556f899964d184e6cb788f3fa9dcddcafe1ab2d
https://git.kernel.org/stable/c/793cedee296fd819bfadc2a7ec4d52faf9c09a0a