CVE-2026-90011

A flaw was found in the Linux kernel's iSCSI target component. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted login payload to an iSCSI portal configured for Challenge-Handshake Authentication Protocol (CHAP). This can lead to an out-of-bounds read, potentially resulting in information disclosure from adjacent memory or a denial of service.

This flaw is rated as having an Important impact because an unauthenticated network initiator can trigger an out-of-bounds memory access prior to session establishment, potentially crashing the host kernel or leaking adjacent slab data. The vulnerability only affects deployments explicitly serving storage through the Linux kernel LIO iSCSI target where CHAP authentication is enabled. Standard Red Hat Enterprise Linux installations do not run the target service by default, and client hosts acting strictly as iSCSI initiators are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.