CVE-2026-97530

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A CPU soft lockup can occur in the scsi qla2xxx driver due to an incorrect polling mechanism in the qla27xx copy multiple pkt() and qla27xx copy fpin pkt() functions. These functions poll the rsp q->ring ptr->signature for a specific value (0xDEADDEAD) to determine if the next continuation Input Output Control Block (IOCB) has arrived. However, a continuation IOCB carries raw Fibre Channel frame payload at the same byte offset. If the received payload bytes happen to match 0xDEADDEAD, the system misinterprets this as the IOCB not having arrived, causing the loop to spin indefinitely in interrupt/DPC context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.