CVE-2026-23296
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix refcount leak for tagset_refcnt This leak will cause a hang when tearing down the SCSI host. For example, iscsid hangs with the following call trace: [130120.652718] scsi_alloc_sdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured PID: 2528 TASK: ffff9d0408974e00 CPU: 3 COMMAND: "iscsid" #0 [ffffb5b9c134b9e0] __schedule at ffffffff860657d4 #1 [ffffb5b9c134ba28] schedule at ffffffff86065c6f #2 [ffffb5b9c134ba40] schedule_timeout at ffffffff86069fb0 #3 [ffffb5b9c134bab0] __wait_for_common at ffffffff8606674f #4 [ffffb5b9c134bb10] scsi_remove_host at ffffffff85bfe84b #5 [ffffb5b9c134bb30] iscsi_sw_tcp_session_destroy at ffffffffc03031c4 [iscsi_tcp] #6 [ffffb5b9c134bb48] iscsi_if_recv_msg at ffffffffc0292692 [scsi_transport_iscsi] #7 [ffffb5b9c134bb98] iscsi_if_rx at ffffffffc02929c2 [scsi_transport_iscsi] #8 [ffffb5b9c134bbf0] netlink_unicast at ffffffff85e551d6 #9 [ffffb5b9c134bc38] netlink_sendmsg at ffffffff85e554ef
How to fix
- linux linux_kernel5.11, 5.15.203, 6.0, 6.1.167, 6.6.130, 6.12.77, 6.18.17, 6.19.7 or later
- git.kernel.org/stable/c/0e274674714427dc578bb99db5b86e312d2b57f8
- git.kernel.org/stable/c/1ac22c8eae81366101597d48360718dff9b9d980
- git.kernel.org/stable/c/7c01b680beaf4d3143866b062b8e770e8b237fb8
- git.kernel.org/stable/c/944a333c8e4d42256556c1d2ebb6d773a33e0dcd
- git.kernel.org/stable/c/9f5e4abed9248448aa1b45b12ab0bea4d329b56a
- git.kernel.org/stable/c/a03d96598d39fdf605d90731db3ef3b13fb8bdc8
- git.kernel.org/stable/c/ec5c17c687b189dbc09dfdec11b669caa40bc395
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.10.223 ≤ v < 5.11, 5.15.164 ≤ v < 5.15.203, 5.19.12 ≤ v < 6.0, 6.0.1 ≤ v < 6.1.167, 6.2 ≤ v < 6.6.130, 6.7 ≤ v < 6.12.77, 6.13 ≤ v < 6.18.17, 6.19 ≤ v < 6.19.7, 6.0, 7.0 | 5.11, 5.15.203, 6.0, 6.1.167, 6.6.130, 6.12.77, 6.18.17, 6.19.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.