CVE-2026-89861

A use-after-free vulnerability exists in the Linux kernel's qla2xxx SCSI driver, specifically in qla24xx_report_id_acquisition(). In the format 1 path, the virtual port is located on ha->vp_list while holding vport_slock, but the lock is dropped before the vport is subsequently used by qla_upd...