CVE-2026-23292

A flaw was found in the Linux kernel's scsi: target subsystem. A local user could trigger a recursive locking condition when the target_core_item_dbroot_store() function attempts to open a configfs file for which it already holds a semaphore. This could lead to a system hang, resulting in a Denial of Service (DoS).

This flaw affects systems using SCSI target (LIO) with configfs. The recursive lock occurs when writing to the dbroot configfs attribute with the path pointing to the same configfs file. This causes the frag_sem semaphore to be acquired twice, leading to a deadlock. Exploiting this requires access to the target configfs interface, typically requiring root privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.