All vulnerabilities
CVE-2026-99206

Linux: scsi: target: iscsi: Fix race in discovery auth updates

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in9b07828b133b326cb4fb59f144ca37f8db535999Also 6caa2b3edb7da4f50a38e16561b75fcae21d4099CVE List
Published28 Oct 2026Updated 28 Oct 2026CVE List

What fixes it

  • 9b07828b133b326cb4fb59f144ca37f8db535999LinuxCVE List
  • 6caa2b3edb7da4f50a38e16561b75fcae21d4099LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Fix race in discovery auth updates

Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsi_update_param_value(), causing a double-free.

Protect the lookup and replacement with the discovery TPG access lock, as used by the other TPG configfs parameter updates.

Text from CVE List

Affected versions 8

  • Linuxaffected: e48354ce078c079996f89d715dfa44814b4eba01 before 9b07828b133b326cb4fb59f144ca37f8db535999CVE List
  • Linuxaffected: e48354ce078c079996f89d715dfa44814b4eba01 before 6caa2b3edb7da4f50a38e16561b75fcae21d4099CVE List
  • Linuxaffected: e48354ce078c079996f89d715dfa44814b4eba01 before e15b81f602edbdee39c335546f25486a1747f3f0CVE List
  • Linuxaffected: 3.1CVE List
  • Linuxunaffected: all versions before 3.1CVE List
  • Linuxunaffected: 6.18.59 through 6.18.*CVE List
  • Linuxunaffected: 7.2.13 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3