Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-99206

scsi: target: iscsi: Fix race in discovery auth updates

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsi_update_param_value(), causing a double-free. Protect the lookup and replacement with the discovery TPG access lock, as used by the other TPG configfs parameter updates.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e48354ce078c079996f89d715dfa44814b4eba01 to < 128dfa7a9b4b3c956e8ac04a169a7ba04960cd75affected
  • e48354ce078c079996f89d715dfa44814b4eba01 to < 35f3eb8ba914cbe079faf8712101b94ce6b2d821affected
  • e48354ce078c079996f89d715dfa44814b4eba01 to < 3b206898acaf40f87cf59e97e511a6b60aad9d5eaffected
  • e48354ce078c079996f89d715dfa44814b4eba01 to < 57b6ebcc83afb5338c561ff97ca85dc954a89136affected
  • e48354ce078c079996f89d715dfa44814b4eba01 to < 083eea404d162c324456cf4ff9912fe8701d936baffected
  • e48354ce078c079996f89d715dfa44814b4eba01 to < 9b07828b133b326cb4fb59f144ca37f8db535999affected
  • e48354ce078c079996f89d715dfa44814b4eba01 to < 6caa2b3edb7da4f50a38e16561b75fcae21d4099affected
  • e48354ce078c079996f89d715dfa44814b4eba01 to < e15b81f602edbdee39c335546f25486a1747f3f0affected

Linux Linux

Default version status: affected

  • 3.1affected
  • 0 to < 3.1unaffected
  • 5.10.273 to ≤ 5.10.*unaffected
  • 5.15.224 to ≤ 5.15.*unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.161 to ≤ 6.6.*unaffected
  • 6.12.115 to ≤ 6.12.*unaffected
  • 6.18.59 to ≤ 6.18.*unaffected
  • 7.2.13 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References