CVE-2026-43054

A flaw was found in the Linux kernel's SCSI target subsystem, specifically within the tcm_loop module. This vulnerability arises when the tcm_loop_target_reset() function, responsible for handling target resets, fails to properly clear out commands that are still being processed. A local user or process could exploit this by initiating a target reset, which leads to unreleased resource references for Logical Unit Numbers (LUNs). The primary consequence is a Denial of Service (DoS) condition, where the system may become unresponsive when attempting to remove a LUN.

tcm_loop target reset must drain in-flight commands before reporting success to SCSI EH; otherwise completions race recovery and leak LUN refs, hanging configfs unlink. Red Hat advises LIO/tcm_loop users to patch target-mode kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.