CVE-2026-99154

A flaw was found in the Linux kernel's libiscsi module. A remote iSCSI target can trigger an out-of-bounds memory read by sending a crafted Protocol Data Unit (PDU) containing a negative task index. This flaw can cause a kernel crash, resulting in a Denial of Service (DoS), or potentially lead to unauthorized information disclosure.

This vulnerability is rated as Moderate severity because exploitation requires an established connection to an untrusted or compromised iSCSI target, limiting attack exposure to hosts actively participating in an iSCSI storage fabric. On default Red Hat Enterprise Linux installations, iSCSI initiator services are inactive and do not connect to external storage endpoints unless explicitly configured. A rogue target returning a crafted protocol data unit with a negative task index can induce an out-of-bounds kernel memory read, resulting in a system crash and denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.