SB20260928406 - Use-after-free in Linux kernel scsi qla2xxx driver

Description

This security bulletin contains information about 1 vulnerability.

1) Use-after-free (CVE-ID: CVE-2026-97536)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 7.7 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to compromise confidentiality, integrity, and availability.

The vulnerability exists due to use-after-free in the qla2xxx response queue work handling when tearing down a response queue with queued response work. A remote attacker can exploit the race condition during queue teardown to compromise confidentiality, integrity, and availability.

The condition is especially likely during full adapter teardown, which forces pending work to run after queue pairs have been freed.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/1710a69fd74d0b4bdfcc57c3309b1c4057f70d85
• https://git.kernel.org/stable/c/19788a55cab61d78e33e0914a5a31d27843e8a4a
• https://git.kernel.org/stable/c/f1f4d1cb93eeeb250eac9405121933e268eefbd3