Unscored severity · published Oct 28, 2026
CVE-2026-99206
scsi: target: iscsi: Fix race in discovery auth updates
New
–
CVSS
–
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Fix race in discovery auth updates
Separate configfs opens can concurrently update the discovery AuthMethod
parameter. Both callers may free the same value in
iscsi_update_param_value(), causing a double-free.
Protect the lookup and replacement with the discovery TPG access lock,
as used by the other TPG configfs parameter updates.
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
e48354ce078c079996f89d715dfa44814b4eba01 before 9b07828b133b326cb4fb59f144ca37f8db535999; e48354ce078c079996f89d715dfa44814b4eba01 before 6caa2b3edb7da4f50a38e16561b75fcae21d4099; e48354ce078c079996f89d715dfa44814b4eba01 before e15b81f602edbdee39c335546f25486a1747f3f0; 3.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-99206
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-99206
git.kernel.org
https://git.kernel.org/stable/c/9b07828b133b326cb4fb59f144ca37f8db535999
git.kernel.org
https://git.kernel.org/stable/c/6caa2b3edb7da4f50a38e16561b75fcae21d4099
git.kernel.org
https://git.kernel.org/stable/c/e15b81f602edbdee39c335546f25486a1747f3f0
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place