CVE-2026-89853

CVE-2026-89853 is a use-after-free in the Linux kernel's qla2xxx SCSI driver. The function qla2x00_free_fce_trace() freed the FCE DMA buffer while holding only fce_mutex, but firmware-dump consumers (qla27xx_fwdt_entry_t264(), qla25xx_copy_fce()) read that buffer under hardware_lock without acqui...