CVE-2026-46149

A flaw was found in the Linux kernel's SCSI target subsystem. This vulnerability, a buffer overflow, occurs in the tg_pt_gp_members_show() function when processing long iSCSI IQN names. An attacker could potentially exploit this by providing a specially crafted input, leading to the disclosure of sensitive information from the kernel stack or a denial of service (DoS) if CONFIG_FORTIFY_SOURCE is enabled.

Red Hat rates this flaw as Moderate severity because exploitation requires local access on systems specifically configured as SCSI storage targets, which is not a default configuration on Red Hat Enterprise Linux. The vulnerability resides in the kernel SCSI target configfs subsystem and only triggers when querying port group attributes for targets defined with long fabric names, such as maximum-length iSCSI IQNs. Because creating and administering SCSI target instances requires privileged access, unprivileged local users cannot set up or manipulate the necessary configurations on default installations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.