CVE-2026-43414 - Vulnerability Analysis

Overview

Linux kernel scsi qla2xxx contains a double free vulnerability caused by improper handling of fcport freeing in qla24xx_els_dcmd_iocb, letting attackers cause denial of service, exploit requires triggering error conditions.

Severity & Score

Impact

Attackers can cause denial of service by triggering a double free, potentially crashing the system.

Mitigation

Update to the latest Linux kernel version containing the fix.

References

• https://git.kernel.org/stable/c/c0b7da13a04bd70ef6070bfb9ea85f582294560a
• https://git.kernel.org/stable/c/d48ea85463f5b34f7b92ea0a13eddf1ab993da7b

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner