{"id":"CVE-2026-97532","summary":"scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path\n\nWhen qla2x00_mem_alloc() fails, qla2x00_probe_one() jumps to\nprobe_hw_failed and calls qla2x00_mem_free(). Several error labels in\nqla2x00_mem_alloc() freed adapter members (elsrej.c, purex_dma_pool,\nflt, sfp_data, loop_id_map, async_pd, sf_init_cb, ex_init_cb, npiv_info)\nbut left the pointers dangling. qla2x00_mem_free() then freed them a\nsecond time. Worse, for the dma_pool members it issued\ndma_pool_free(ha-\u003es_dma_pool, ...) after s_dma_pool had already been\ndestroyed and set to NULL at fail_s_dma_pool, dereferencing a NULL pool.\n\nClear each freed pointer (and its DMA handle) in the error labels so the\nsubsequent qla2x00_mem_free() skips them.","modified":"2026-11-13T04:07:22.386711062Z","published":"2026-09-25T10:21:32.582Z","related":["SUSE-SU-2026:24550-1","SUSE-SU-2026:24619-1","SUSE-SU-2026:24643-1","SUSE-SU-2026:24648-1","SUSE-SU-2026:24651-1","SUSE-SU-2026:24662-1","SUSE-SU-2026:5091-1","openSUSE-SU-2026:12074-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97532.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/286d9594a022dd7e0caa3de9daa63b896bc70d43"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5e0d6ffabbbd86b3fb9168b9dbb62190ecb20d84"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6d90f0feb929f6c0f3010f9af4747c7230b75993"},{"type":"WEB","url":"https://git.kernel.org/stable/c/84f5de696b8c924aeb4bf430a0bdc762fc50e99f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a57570229edb7a0990d5c8067daeb9ac8858a961"},{"type":"WEB","url":"https://git.kernel.org/stable/c/aea0901d35beb3acc8a4086fb00c5b9c0e9c83ab"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d3dee064ab9d705f6f652c639c55d7ea74df87cc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e6732abc33c41772192ef8717354a5574a5c2ebf"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97532.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97532"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"d64d6c5671db5e693a0caaee79f2571b098749c9"},{"fixed":"e6732abc33c41772192ef8717354a5574a5c2ebf"},{"fixed":"aea0901d35beb3acc8a4086fb00c5b9c0e9c83ab"},{"fixed":"d3dee064ab9d705f6f652c639c55d7ea74df87cc"},{"fixed":"5e0d6ffabbbd86b3fb9168b9dbb62190ecb20d84"},{"fixed":"84f5de696b8c924aeb4bf430a0bdc762fc50e99f"},{"fixed":"a57570229edb7a0990d5c8067daeb9ac8858a961"},{"fixed":"286d9594a022dd7e0caa3de9daa63b896bc70d43"},{"fixed":"6d90f0feb929f6c0f3010f9af4747c7230b75993"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"8540351ee8a4d540b1b7ee64b88d5e42c7c0bfbc"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"7142b10b87d5b393a0688358b16a4b1d3680ec7d"}]}],"versions":["v4.14.336","v4.14.335","v4.14.334","v4.14.333","v4.14.332","v4.14.331","v4.14.330","v4.14.329","v4.14.328","v4.14.327","v4.14.326","v4.14.325","v4.14.324","v4.14.323","v4.14.322","v4.14.321","v4.14.320","v4.14.319","v4.14.318","v4.14.317","v4.14.316","v4.14.315","v4.14.314","v4.14.313","v4.14.312","v4.14.311","v4.14.310","v4.14.309","v4.14.308","v4.14.307","v4.14.306","v4.14.305","v4.14.304","v4.14.303","v4.14.302","v4.14.301","v4.14.300","v4.14.299","v4.14.298","v4.14.297","v4.14.296","v4.14.295","v4.14.294","v4.14.293","v4.14.292","v4.14.291","v4.14.290","v4.14.289","v4.14.288","v4.14.287","v4.14.286","v4.14.285","v4.14.284","v4.14.283","v4.14.282","v4.14.281","v4.14.280","v4.14.279","v4.14.278","v4.14.277","v4.14.276","v4.14.275","v4.14.274","v4.14.273","v4.14.272","v4.14.271","v4.14.270","v4.14.269","v4.14.268","v4.14.267","v4.14.266","v4.14.265","v4.14.264","v4.14.263","v4.14.262","v4.14.261","v4.14.260","v4.14.259","v4.14.258","v4.14.257","v4.14.256","v4.14.255","v4.14.254","v4.14.253","v4.14.252","v4.14.251","v4.14.250","v4.14.249","v4.14.248","v4.14.247","v4.14.246","v4.14.245","v4.14.244","v4.14.243","v4.14.242","v4.14.241","v4.14.240","v4.14.239","v4.14.238","v4.14.237","v4.14.236","v4.14.235","v4.14.234","v4.14.233","v4.14.232","v4.14.231","v4.14.230","v4.14.229","v4.14.228","v4.14.227","v4.14.226","v4.14.225","v4.14.224","v4.14.223","v4.14.222","v4.14.221","v4.14.220","v4.14.219","v4.14.218","v4.14.217","v4.14.216","v4.14.215","v4.14.214","v4.14.213","v4.14.212","v4.14.211","v4.14.210","v4.14.209","v4.14.208","v4.14.207","v4.14.206","v4.14.205","v4.14.204","v4.14.203","v4.14.202","v4.14.201","v4.14.200","v4.14.199","v4.14.198","v4.14.197","v4.14.196","v4.14.195","v4.14.194","v4.14.193","v4.14.192","v4.14.191","v4.14.190","v4.14.189","v4.14.188","v4.14.187","v4.14.186","v4.14.185","v4.14.184","v4.14.183","v4.14.182","v4.14.181","v4.14.180","v4.14.179","v4.14.178","v4.14.177","v4.14.176","v4.14.175","v4.14.174","v4.14.173","v4.14.172","v4.14.171","v4.14.170","v4.14.169","v4.14.168","v4.14.167","v4.14.166","v4.14.165","v4.14.164","v4.14.163","v4.14.162","v4.14.161","v4.14.160","v4.14.159","v4.14.158","v4.14.157","v4.14.156","v4.14.155","v4.14.154","v4.14.153","v4.14.152","v4.14.151","v4.14.150","v4.14.149","v4.14.148","v4.14.147","v4.14.146","v4.14.145","v4.14.144","v4.14.143","v4.14.142","v4.14.141","v4.14.140","v4.14.139","v4.14.138","v4.14.137","v4.14.136","v4.14.135","v4.14.134","v4.14.133","v4.14.132","v4.14.131","v4.14.130","v4.14.129","v4.14.128","v4.14.127","v4.14.126","v4.14.125","v4.14.124","v4.14.123","v4.14.122","v4.14.121","v4.14.120","v4.14.119","v4.14.118","v4.14.117","v4.14.116","v4.14.115","v4.14.114","v4.14.113","v4.14.112","v4.14.111","v4.14.110","v4.14.109","v4.14.108","v4.14.107","v4.14.106","v4.14.105","v4.14.104","v4.14.103","v4.14.102","v4.14.101","v4.14.100","v4.14.99","v4.14.98","v4.14.97","v4.14.96","v4.14.95","v4.14.94","v4.14.93","v4.14.92","v4.14.91","v4.14.90","v4.14.89","v4.14.88","v4.14.87","v4.14.86","v4.14.85","v4.14.84","v4.14.83","v4.14.82","v4.14.81","v4.14.80","v4.14.79","v4.14.78","v4.14.77","v4.14.76","v4.14.75","v4.14.74","v4.14.73","v4.14.72","v4.14.71","v4.14.70","v4.14.69","v4.14.68","v4.14.67","v4.14.66","v4.14.65","v4.14.64","v4.14.63","v4.14.62","v4.14.61","v4.14.60","v4.14.59","v4.14.58","v4.14.57","v4.14.56","v4.14.55","v4.14.54","v4.14.53","v4.14.52","v4.14.51","v4.14.50","v4.14.49","v4.14.48","v4.14.47","v4.14.46","v4.14.45","v4.14.44","v4.14.43","v4.14.42","v4.14.41","v4.14.40","v4.14.39","v4.14.38","v4.14.37","v4.14.36","v4.14.35","v4.14.34","v4.14.33","v4.14.32","v4.14.31","v4.14.30","v4.14.29","v4.14.28","v4.14.27","v4.15.18","v4.15.17","v4.15.16","v4.15.15","v4.15.14","v4.15.13","v4.15.12","v4.15.11","v4.15.10"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97532.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.27"},{"fixed":"4.15"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.15.10"},{"fixed":"4.16"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.16.0"},{"fixed":"5.10.273"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.224"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.191"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.160"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.112"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.53"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.7"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97532.json"}}],"schema_version":"1.9.2"}