CVE-2026-89848

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the qla2xxx driver. The function qla2xxx delete qpair() deletes the request queue before the response queue. Because qla25xx delete req que() frees the request queue memory while the response-queue MSI-X (Message Signaled Interrupts) is still active, a response interrupt can trigger. This leads to qla2xxx msix rsp q() queuing qpair->q work, which subsequently causes qla24xx process response queue() to dereference the freed rsp->req memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.