CVE-2026-97532

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the qla2xxx SCSI driver where the qla2x00 mem alloc() function fails to nullify pointers after freeing them during an error path. When qla2x00 probe one() encounters a failure and calls qla2x00 mem free(), several adapter members—including elsrej.c, purex dma pool, flt, sfp data, loop id map, async pd, sf init cb, ex init cb, and npiv info—are freed a second time because the pointers remained dangling. Additionally, the system may attempt to call dma pool free() using ha->s dma pool after it has already been destroyed and set to NULL, leading to a NULL pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.