CVE-2026-43055

A flaw was found in the Linux kernel's SCSI target file module. When a write command is executed, the aio_cmd->iocb for the ki_write_stream is not initialized. This can lead to an incorrect ki_write_stream value, causing unintended write failures in the block device. This vulnerability can result in a Denial of Service (DoS) for applications attempting to write data.

SCSI target FILEIO aio_cmd allocation now uses flexible kzalloc sizing, avoiding underallocation for large aio vectors. Red Hat recommends updated kernels for LIO FILEIO backends.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.