CVE-2026-23296

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/03/2026
Last modified:
18/04/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> scsi: core: Fix refcount leak for tagset_refcnt<br /> <br /> This leak will cause a hang when tearing down the SCSI host. For example,<br /> iscsid hangs with the following call trace:<br /> <br /> [130120.652718] scsi_alloc_sdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured<br /> <br /> PID: 2528 TASK: ffff9d0408974e00 CPU: 3 COMMAND: "iscsid"<br /> #0 [ffffb5b9c134b9e0] __schedule at ffffffff860657d4<br /> #1 [ffffb5b9c134ba28] schedule at ffffffff86065c6f<br /> #2 [ffffb5b9c134ba40] schedule_timeout at ffffffff86069fb0<br /> #3 [ffffb5b9c134bab0] __wait_for_common at ffffffff8606674f<br /> #4 [ffffb5b9c134bb10] scsi_remove_host at ffffffff85bfe84b<br /> #5 [ffffb5b9c134bb30] iscsi_sw_tcp_session_destroy at ffffffffc03031c4 [iscsi_tcp]<br /> #6 [ffffb5b9c134bb48] iscsi_if_recv_msg at ffffffffc0292692 [scsi_transport_iscsi]<br /> #7 [ffffb5b9c134bb98] iscsi_if_rx at ffffffffc02929c2 [scsi_transport_iscsi]<br /> #8 [ffffb5b9c134bbf0] netlink_unicast at ffffffff85e551d6<br /> #9 [ffffb5b9c134bc38] netlink_sendmsg at ffffffff85e554ef

Impact