CVE-2026-99153

A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service (DoS) or data integrity issues by sending a crafted Reject Protocol Data Unit (PDU) containing an unvalidated Initiator Task Tag (ITT). Because the kernel fails to verify that the reflected task identifier corresponds to a valid in-flight request, it may attempt to process an uninitialized or freed task. This improper handling leads to a null-pointer dereference and a kernel crash, or causes read operations to complete without receiving actual data.

This vulnerability is rated as Important severity because an untrusted or compromised storage target can remotely induce a host kernel panic or corrupt data over the network without requiring prior local credentials. Red Hat Enterprise Linux systems are only vulnerable if configured as an iSCSI initiator and actively connected to a malicious or rogue target node. Because iSCSI initiator connectivity is not enabled or established by default on standard installations, exposure is limited to hosts utilizing networked iSCSI storage.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.