CVE-2026-97527 Linux Kernel qla2xxx - Race Condition

Linux kernel contains a race condition in qla2xxx NVMe FC port unsol_ctx_head list caused by lack of proper locking, letting concurrent contexts corrupt list pointers, exploit requires concurrent access to FC port operations.

CVSS base score 8.8 /10
High
CISA KEV
Not listed
Public exploit
None known
Authentication
Not required
EPSS
0.32% chance of exploitation in 30 days
View the NVD record ↗

Details

Type
Race Condition
Impact
Denial Of Service
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
25 September 2026
Updated
15 October 2026

References

← All CVEs