Threats tagged 'ghsa-hfg3-mcr3-v8r7'

CVE-2026-89860 is a high-severity vulnerability in the Linux kernel's qla2xxx SCSI driver. The flaw involves improper reinitialization of a work_struct (abort_work) multiple times during NVMe abort operations, which can corrupt the workqueue and cause system crashes or looping worker threads. The issue is fixed by initializing abort_work only once at command submission and avoiding repeated INIT_WORK calls during aborts.