CVE-2026-64003

CVE-2026-64003 — Linux kernel SCSI core queue handling fix . The vulnerability originates in scsi_run_host_queues: while a SCSI host is recovering, scsi_mq_requeue_cmd() does not guarantee requeued commands will be kicked, and scsi_run_host_queues() previously iterated devices via shost_for_each_...