CVE-2026-99207

A flaw was found in the Linux kernel's SCSI target subsystem. This issue allows a storage initiator or virtual machine guest to cause a Denial of Service (DoS) through a system deadlock. The vulnerability occurs because the subsystem fails to disable interrupts while holding an internal lock during delayed command processing. When handling ordered storage requests under specific configurations, an interrupt can attempt to acquire the held lock on the same processor, causing the kernel to hang.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.