CVE-2026-43414

EUVD-2026-28720

08.05.2026, 15:16

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Completely fix fcport double free

In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcmd_sp_free().
When an error happens, this function is called by qla2x00_sp_release(),
when kref_put() releases the first and the last reference.

qla2x00_els_dcmd_sp_free() frees fcport by calling qla2x00_free_fcport().
Doing it one more time after kref_put() is a bad idea.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 29%

Debian Releases

Debian Product

Codename

linux

bookworm	vulnerable
bookworm (security)	vulnerable
bullseye	5.10.223-1 fixed
bullseye (security)	5.10.257-1 fixed
forky	7.0.12-2 fixed
sid	7.0.13-1 fixed
trixie	vulnerable
trixie (security)	vulnerable

openSUSE / SLES Releases

openSUSE Product

Release

cluster-md-kmp-default

suse enterprise server 12 SP5

4.12.14-122.317.1

fixed

dlm-kmp-default

suse enterprise server 12 SP5

4.12.14-122.317.1

fixed

gfs2-kmp-default

suse enterprise server 12 SP5

4.12.14-122.317.1

fixed

kernel-64kb

suse enterprise desktop 15 SP7	6.4.0-150700.53.60.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.60.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.60.1 fixed

kernel-default

suse enterprise desktop 15 SP7	6.4.0-150700.53.60.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.60.1 fixed
suse enterprise server 12 SP5	4.12.14-122.317.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.60.1 fixed

kernel-default-base

suse enterprise desktop 15 SP7	6.4.0-150700.53.60.1.150700.17.35.4 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.60.1.150700.17.35.4 fixed
suse enterprise server 12 SP5	4.12.14-122.317.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.60.1.150700.17.35.4 fixed

kernel-default-man

suse enterprise server 12 SP5

4.12.14-122.317.1

fixed

kernel-obs-build

suse enterprise desktop 15 SP7	6.4.0-150700.53.60.2 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.60.2 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.60.2 fixed

kernel-source

suse enterprise desktop 15 SP7	6.4.0-150700.53.60.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.60.1 fixed
suse enterprise server 12 SP5	4.12.14-122.317.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.60.1 fixed

kernel-zfcpdump

suse enterprise desktop 15 SP7	6.4.0-150700.53.60.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.60.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.60.1 fixed

ocfs2-kmp-default

suse enterprise server 12 SP5

4.12.14-122.317.1

fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

kernel

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-debug

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-debug-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-debug-devel

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-debug-devel-matched

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-debug-modules

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-debug-modules-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-debug-modules-extra

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-devel

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-devel-matched

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-modules

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-modules-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-64k-modules-extra

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-abi-stablelists

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-debug

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-debug-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-debug-devel

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-debug-devel-matched

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-debug-modules

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-debug-modules-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-debug-modules-extra

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-debug-uki-virt

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-devel

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-devel-matched

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-doc

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-modules

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-modules-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-modules-extra

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k-debug

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k-debug-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k-debug-devel

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k-debug-modules

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k-debug-modules-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k-debug-modules-extra

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k-devel

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k-modules

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k-modules-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-64k-modules-extra

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-debug

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-debug-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-debug-devel

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-debug-modules

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-debug-modules-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-debug-modules-extra

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-devel

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-modules

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-modules-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-rt-modules-extra

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-tools

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-tools-libs

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-tools-libs-devel

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-uki-virt

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-uki-virt-addons

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-zfcpdump

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-zfcpdump-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-zfcpdump-devel

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-zfcpdump-devel-matched

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-zfcpdump-modules

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-zfcpdump-modules-core

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

kernel-zfcpdump-modules-extra

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

libperf

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

perf

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

python3-perf

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

rtla

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

RHEL 9

0:5.14.0-687.17.1.el9_8

fixed

Vulnerability Media Exposure

[GERMAN] Linux Kernel: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
Published: 2026-05-10T22:00:00+00:00

References

https://git.kernel.org/stable/c/c0b7da13a04bd70ef6070bfb9ea85f582294560a

https://git.kernel.org/stable/c/d48ea85463f5b34f7b92ea0a13eddf1ab993da7b