CVE-2026-99154

The Linux kernel contains a vulnerability in libiscsi where the parse_pdu_itt function fails to check for negative values when handling a task index from a PDU. Because the check if (i >= session->cmds_max) only validates the upper bound, a negative index can pass through, causing the syste...