CVE-2026-97528

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the scsi qla2xxx driver where the qla nvme xmt ls rsp() function fails to remove uctx from the fcport->unsol ctx head list before freeing it with kfree() during an LS reject error. This results in a freed node remaining in the list, which can lead to memory corruption or a system panic when subsequent list add tail() or list del() operations occur on that fcport.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.