Linux Kernel Vulnerability in SCSI Subsystem Affecting QLogic Products

CVE-2026-43414

What is CVE-2026-43414?

A vulnerability exists in the Linux kernel's SCSI subsystem specifically related to the QLogic products. The issue arises in the function handling the freeing process of fcport, leading to a potential double-free scenario. When errors are encountered, the function responsible for managing command messages inadvertently attempts to free an already released resource. This flaw can result in unpredictable behavior, posing security risks that can be exploited by malicious actors. It's crucial for users to ensure they are running patched versions of the kernel to mitigate these issues.

References