CVE-2026-99206

scsi: target: iscsi: Fix race in discovery auth updates

State: Published
Severity: Not scored
Published: Oct 28, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Fix race in discovery auth updates

Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsi_update_param_value(), causing a double-free.

Protect the lookup and replacement with the discovery TPG access lock, as used by the other TPG configfs parameter updates.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e48354ce078c079996f89d715dfa44814b4eba01 to before 128dfa7a9b4b3c956e8ac04a169a7ba04960cd75Affected e48354ce078c079996f89d715dfa44814b4eba01 to before 35f3eb8ba914cbe079faf8712101b94ce6b2d821Affected e48354ce078c079996f89d715dfa44814b4eba01 to before 3b206898acaf40f87cf59e97e511a6b60aad9d5eAffected e48354ce078c079996f89d715dfa44814b4eba01 to before 57b6ebcc83afb5338c561ff97ca85dc954a89136Affected e48354ce078c079996f89d715dfa44814b4eba01 to before 083eea404d162c324456cf4ff9912fe8701d936bAffected e48354ce078c079996f89d715dfa44814b4eba01 to before 9b07828b133b326cb4fb59f144ca37f8db535999Affected e48354ce078c079996f89d715dfa44814b4eba01 to before 6caa2b3edb7da4f50a38e16561b75fcae21d4099Affected e48354ce078c079996f89d715dfa44814b4eba01 to before e15b81f602edbdee39c335546f25486a1747f3f0Affected
LinuxLinux	3.1Affected before 3.1Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.161 through 6.6.Not affected 6.12.115 through 6.12.Not affected 6.18.59 through 6.18.Not affected 7.2.13 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

e48354ce078c079996f89d715dfa44814b4eba01 to before 128dfa7a9b4b3c956e8ac04a169a7ba04960cd75Affected
e48354ce078c079996f89d715dfa44814b4eba01 to before 35f3eb8ba914cbe079faf8712101b94ce6b2d821Affected
e48354ce078c079996f89d715dfa44814b4eba01 to before 3b206898acaf40f87cf59e97e511a6b60aad9d5eAffected
e48354ce078c079996f89d715dfa44814b4eba01 to before 57b6ebcc83afb5338c561ff97ca85dc954a89136Affected
e48354ce078c079996f89d715dfa44814b4eba01 to before 083eea404d162c324456cf4ff9912fe8701d936bAffected
e48354ce078c079996f89d715dfa44814b4eba01 to before 9b07828b133b326cb4fb59f144ca37f8db535999Affected
e48354ce078c079996f89d715dfa44814b4eba01 to before 6caa2b3edb7da4f50a38e16561b75fcae21d4099Affected
e48354ce078c079996f89d715dfa44814b4eba01 to before e15b81f602edbdee39c335546f25486a1747f3f0Affected

LinuxLinux

3.1Affected
before 3.1Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.161 through 6.6.*Not affected
6.12.115 through 6.12.*Not affected
6.18.59 through 6.18.*Not affected
7.2.13 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.