CVE-2026-97527

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the scsi qla2xxx driver where the fcport->unsol ctx head list is modified from multiple contexts without a common lock. Entries are added via the qla2xxx process purls iocb() function from the response queue ISR, while they are removed via qla2xxx process purls pkt(), qla nvme xmt ls rsp(), and qla nvme release lsrsp cmd kref(). Because multiqueue adapters add entries through different qpairs, the existing qp lock is insufficient to serialize the list, which can lead to corrupted list pointers during concurrent add or delete operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.