UBUNTU-CVE-2026-89860: High severity ubuntu/linux-hwe-edge vulnerability

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abortwork once at submission qlanvmefcpabort() and qlanvmelsabort() ran INITWORK() on priv->abortwork immediately before schedulework(). INITWORK() reinitializes the workstruct, resetting its list head and clearing the pending bit. If an abort is issued more than once for the same command (for example, concurrent transport teardown and a timeout-driven abort), the second INITWORK() reinitializes a work item that is already queued, which can corrupt the workqueue list and lead to crashes or a looping worker. Initialize priv->abortwork once at command submission, next to the existing per-command spinlockinit(&priv->cmdlock), and leave only schedulework() in the abort paths. schedulework() already does nothing when the work item is still pending, so a repeated abort no longer disturbs an in-flight work item. The command is not returned to the transport until the final krefput()/release callback runs after abortwork has completed, so the work item is idle before priv is reused and the single submission-time INITWORK() is safe.