CVE-2026-74557

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer<br /> <br /> iscsi_scsi_cmd_rsp() copies the sense data of a SCSI Response from the<br /> target-supplied data segment. The segment carries a 2-byte sense length<br /> followed by the sense bytes, so it must hold 2 + senselen bytes, but the<br /> bounds check only requires datalen &gt;= senselen:<br /> <br /> senselen = get_unaligned_be16(data);<br /> if (datalen sense_buffer, data + 2,<br /> min_t(uint16_t, senselen, SCSI_SENSE_BUFFERSIZE));<br /> <br /> A target that returns a SCSI Response whose datalen equals senselen<br /> (with senselen data contents and end up in the command&amp;#39;s sense buffer, which is<br /> returned to userspace.<br /> <br /> Account for the 2-byte sense length prefix in the check.