CVE-2026-99152

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a management response iscsicompletepdu fetches the task for five response types from one place and checks only that the index resolved: case ISCSIOPLOGOUTRSP: case ISCSIOPLOGINRSP: case...

CVE-2026-99153

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the ITT reflected in a Reject PDU A Reject PDU carries a copy of the header it rejects, and iscsihandlereject takes the ITT out of that copy to find the task to clean up: memcpy&rejectedpdu, data,...

CVE-2026-99152 scsi: libiscsi: Validate the task named by a management response

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a management response iscsicompletepdu fetches the task for five response types from one place and checks only that the index resolved: case ISCSIOPLOGOUTRSP: case ISCSIOPLOGINRSP: case...

EUVD-2026-111904

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a management response iscsicompletepdu fetches the task for five response types from one place and checks only that the index resolved: case ISCSIOPLOGOUTRSP: case ISCSIOPLOGINRSP: case...