CVE-2026-99154

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from parsepduitt A transport that implements parsepduitt hands libiscsi an index taken from the PDU, and both lookups bound it from above only: if i = session-cmdsmax i and cmdsmax are...

CVE-2026-99154

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from parsepduitt A transport that implements parsepduitt hands libiscsi an index taken from the PDU, and both lookups bound it from above only: if i = session-cmdsmax i and cmdsmax are...

EUVD-2026-111906

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from parsepduitt A transport that implements parsepduitt hands libiscsi an index taken from the PDU, and both lookups bound it from above only: if i = session-cmdsmax i and cmdsmax are...

CVE-2026-99154 scsi: libiscsi: Reject a negative task index from parse_pdu_itt

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from parsepduitt A transport that implements parsepduitt hands libiscsi an index taken from the PDU, and both lookups bound it from above only: if i = session-cmdsmax i and cmdsmax are...

CVE-2026-99154

The Linux kernel contains a vulnerability in libiscsi where the parse_pdu_itt function fails to check for negative values when handling a task index from a PDU. Because the check if (i >= session->cmds_max) only validates the upper bound, a negative index can pass through, causing the syste...

UBUNTU-CVE-2026-99154

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from parsepduitt A transport that implements parsepduitt hands libiscsi an index taken from the PDU, and both lookups bound it from above only: if i = session-cmdsmax i and cmdsmax are...