CVE-2026-89847

CVE-2026-89847 is a use-after-free in the Linux kernel qla2xxx SCSI driver . When qla24xx_async_abort_cmd() fails in qla2x00_async_iocb_timeout(), both the SRB_LOGIN_CMD and SRB_CTRL_VP paths call sp->done() unconditionally without verifying the SRB was actually found and removed from outstand...