CVE-2026-23296: scsi: core: Fix refcount leak for tagset_refcnt
In the Linux kernel, the following vulnerability has been resolved:
scsi: core: Fix refcount leak for tagsetrefcnt
This leak will cause a hang when tearing down the SCSI host. For example, iscsid hangs with the following call trace:
[130120.652718] scsiallocsdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured
PID: 2528 TASK: ffff9d0408974e00 CPU: 3 COMMAND: "iscsid" #0 [ffffb5b9c134b9e0] schedule at ffffffff860657d4 #1 [ffffb5b9c134ba28] schedule at ffffffff86065c6f #2 [ffffb5b9c134ba40] scheduletimeout at ffffffff86069fb0 #3 [ffffb5b9c134bab0] waitforcommon at ffffffff8606674f #4 [ffffb5b9c134bb10] scsiremovehost at ffffffff85bfe84b #5 [ffffb5b9c134bb30] iscsiswtcpsessiondestroy at ffffffffc03031c4 [iscsitcp] #6 [ffffb5b9c134bb48] iscsiifrecvmsg at ffffffffc0292692 [scsitransportiscsi] #7 [ffffb5b9c134bb98] iscsiifrx at ffffffffc02929c2 [scsitransportiscsi] #8 [ffffb5b9c134bbf0] netlinkunicast at ffffffff85e551d6 #9 [ffffb5b9c134bc38] netlinksendmsg at ffffffff85e554ef
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23296?
CVE-2026-23296 has been classified as a medium severity vulnerability due to the potential for SCSI host hangs.
How do I fix CVE-2026-23296?
To resolve CVE-2026-23296, update to the latest version of the Linux kernel that includes the fix for the refcount leak.
Which software is affected by CVE-2026-23296?
CVE-2026-23296 affects the Linux kernel, specifically related to SCSI host management.
What is the impact of CVE-2026-23296?
The impact of CVE-2026-23296 is a potential hang during the teardown process of the SCSI host.
Is there a public reference for CVE-2026-23296?
Yes, CVE-2026-23296 is documented in various public kernel repositories.