CVE-2026-74703

A flaw was found in the Linux kernel's vhost-scsi component. When T10 Protection Information (PI) is negotiated, a remote attacker could send a specially crafted request with malformed scatterlist counts. This could lead to an invalid memory allocation operation, triggering a kernel panic and resulting in a Denial of Service (DoS) for the affected system.

This vulnerability is rated as Moderate severity because exploitation requires an active vhost-scsi target negotiated with T10 Protection Information, restricting the failure domain to a host kernel crash without threatening data integrity or confidentiality. A guest or local entity capable of submitting invalid payload lengths can trigger an assertion failure and denial of service, but cannot gain elevated privileges. Supported Red Hat Enterprise Linux releases are not affected as standard kernel distributions do not contain the vulnerable upstream code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.