CVE-2026-99206 in Linux
Zusammenfassung
von MITRE • 28.10.2026
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Fix race in discovery auth updates
Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsi_update_param_value(), causing a double-free.
Protect the lookup and replacement with the discovery TPG access lock, as used by the other TPG configfs parameter updates.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.