CVE-2026-23296

A flaw was found in the Linux kernel's SCSI core. A reference count leak, a type of resource management issue, occurs when tearing down a SCSI host due to an error in the tagset_refcnt mechanism. This can cause the system to hang, leading to a Denial of Service (DoS) for the affected system.

This vulnerability affects systems using iSCSI or other SCSI-based storage where the reference counting error can cause a hang during host teardown. The issue manifests as a process waiting indefinitely in scsi_remove_host(), preventing proper cleanup. Since the impact is limited to availability without any confidentiality or integrity implications, this is rated as Moderate.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.