exploitDog

CVE-2026-43414

Опубликовано: 08 мая 2026

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Completely fix fcport double free

In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcmd_sp_free(). When an error happens, this function is called by qla2x00_sp_release(), when kref_put() releases the first and the last reference.

qla2x00_els_dcmd_sp_free() frees fcport by calling qla2x00_free_fcport(). Doing it one more time after kref_put() is a bad idea.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.15.154 (включая) до 5.16 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.1.84 (включая) до 6.2 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.6.24 (включая) до 6.7 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7.12 (включая) до 6.8 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.8.3 (включая) до 6.9 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.9.1 (включая) до 6.19.9 (исключая)

cpe:2.3:o:linux:linux_kernel:6.9:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.0038

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVE-2026-43414

CVSS3: 9.8

ubuntu

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcmd_sp_free(). When an error happens, this function is called by qla2x00_sp_release(), when kref_put() releases the first and the last reference. qla2x00_els_dcmd_sp_free() frees fcport by calling qla2x00_free_fcport(). Doing it one more time after kref_put() is a bad idea.

CVE-2026-43414

CVSS3: 7.1

redhat

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcmd_sp_free(). When an error happens, this function is called by qla2x00_sp_release(), when kref_put() releases the first and the last reference. qla2x00_els_dcmd_sp_free() frees fcport by calling qla2x00_free_fcport(). Doing it one more time after kref_put() is a bad idea.

CVE-2026-43414

msrc

2 месяца назад

scsi: qla2xxx: Completely fix fcport double free

CVE-2026-43414

CVSS3: 9.8

debian

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: s ...

GHSA-qm6r-96cc-q36w

CVSS3: 9.8

github

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcmd_sp_free(). When an error happens, this function is called by qla2x00_sp_release(), when kref_put() releases the first and the last reference. qla2x00_els_dcmd_sp_free() frees fcport by calling qla2x00_free_fcport(). Doing it one more time after kref_put() is a bad idea.

EPSS

Процентиль: 30%

0.0038

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-415