CVE-2026-97531

The Linux kernel contains a vulnerability in the scsi: qla2xxx driver where qla24xx_report_id_acquisition() could inadvertently re-insert a dying vport into the host_map btree. During vport teardown, a window exists where the vport is removed from the host_map and its d_id is zeroed, but it remai...

CVE-2026-97531: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Skip vport under deletion in report ID acquisition qla24xxreportidacquisition format-1 handling walks ha-vplist under vportslock, takes a vrefcount on the matching vport and calls qlaupdatehostmap to register its...

CVE-2009-3556

A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...