CVE-2026-89861 scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()

🗓️ 16 Sep 2026 10:31:32Reported by GoogleType

osv_cve🔗 osv.dev👁 12 Views

Use-after-free in Linux kernel qla2xxx qla24xx_report_id_acquisition via missing vport reference.

Reporter	Title	Published	Views	Family All 30
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-135)	17 Oct 202600:00	–	nessus
Tenable Nessus	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	4 Oct 202600:00	–	nessus
Tenable Nessus	Debian dla-4841 : ata-modules-6.1.0-53-armmp-di - security update	17 Oct 202600:00	–	nessus
Tenable Nessus	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	29 Sep 202600:00	–	nessus
Tenable Nessus	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500374)	8 Oct 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792243434)	17 Oct 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-89861	16 Sep 202600:00	–	nessus
CBLMariner	CVE-2026-89861 affecting package kernel for versions less than 6.6.157.1-1	1 Oct 202604:01	–	cbl_mariner
Circl	CVE-2026-89861	1 Oct 202618:00	–	circl
CVE	CVE-2026-89861	16 Sep 202610:31	–	cve

Source	Link
git	www.git.kernel.org/stable/c/267533b28ddf2c9223d30ad7e6960fa9e936428e
git	www.git.kernel.org/stable/c/47272152a13d202d98496208f9bf382c1cf4d4fb
git	www.git.kernel.org/stable/c/4b7f0a95bfeb1d3673da4c29bbe9872a61bc1a69
git	www.git.kernel.org/stable/c/793cedee296fd819bfadc2a7ec4d52faf9c09a0a
git	www.git.kernel.org/stable/c/d09ef32af1e05d79f29b460521a20bc4e6fd2ecf
git	www.git.kernel.org/stable/c/d556f899964d184e6cb788f3fa9dcddcafe1ab2d
git	www.git.kernel.org/stable/c/f6b3bcc7cb2f4c37464958b9fd97dc7f185ea297
git	www.git.kernel.org/stable/c/f8d2eb510c063a8ca79a5dc766a4303d3925fe83
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89861.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-89861

25 Sep 2026 18:26Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.18.1

EPSS0.00571

qla2xxx use-after-free vport reference qla24xx_report_id_acquisition Linux kernel