CVE-2026-63886

The CVE-2026-63886 entry documents a Linux kernel SCSI target (iSCSI CHAP_R) vulnerability where chap_base64_decode() could overflow a 32- or 16-byte digest buffer when processing BASE64-encoded responses. The root cause is decoding input without validating that the decoded data fits into client_...