CVE-2026-99206

Impact

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsi_update_param_value(), causing a double-free. Protect the lookup and replacement with the discovery TPG access lock, as used by the other TPG configfs parameter updates.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• https://git.kernel.org/stable/c/083eea404d162c324456cf4ff9912fe8701d936b
• https://git.kernel.org/stable/c/128dfa7a9b4b3c956e8ac04a169a7ba04960cd75
• https://git.kernel.org/stable/c/35f3eb8ba914cbe079faf8712101b94ce6b2d821
• https://git.kernel.org/stable/c/3b206898acaf40f87cf59e97e511a6b60aad9d5e
• https://git.kernel.org/stable/c/57b6ebcc83afb5338c561ff97ca85dc954a89136
• https://git.kernel.org/stable/c/6caa2b3edb7da4f50a38e16561b75fcae21d4099
• https://git.kernel.org/stable/c/9b07828b133b326cb4fb59f144ca37f8db535999
• https://git.kernel.org/stable/c/e15b81f602edbdee39c335546f25486a1747f3f0