CVE-2026-89853

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the qla2xxx SCSI driver. The function qla2x00 free fce trace() frees and clears the ha->fce variable while holding only the fce mutex. However, the firmware-dump functions qla27xx fwdt entry t264() and qla25xx copy fce() access ha->fce under the hardware lock without acquiring the fce mutex. This allows a debugfs FCE disable operation to free the DMA (Direct Memory Access) buffer—a method for hardware to access system memory without involving the CPU—after a NULL check but before the buffer is copied, leading to a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.