DEBIAN-CVE-2026-99206: Debian/linux vulnerability

Published Oct 28, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue(), causing a double-free. Protect the lookup and replacement with the discovery TPG access lock, as used by the other TPG configfs parameter updates.

Affected Software

3 affected components

debian/linux*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Compensating control
In iscsi_update_param_value(), protect the discovery AuthMethod lookup and replacement with the discovery TPG access lock, consistent with other TPG configfs parameter updates.

Event History

Oct 28, 2026

CVE Published

via OSV·11:17 AM

Data Sourced

via OSV·11:17 AM

DescriptionAffected Software

Frequently Asked Questions

What systems are exposed to this race condition?

Systems using the Linux kernel iSCSI target subsystem with discovery authentication configuration exposed through configfs are relevant. The race requires separate configfs opens that concurrently update the discovery AuthMethod parameter.

What must an attacker or user be able to do to trigger the issue?

They need the ability to perform concurrent updates to the discovery AuthMethod parameter through the iSCSI target configfs interface. The flaw arises when two callers update that parameter at the same time and can free the same value.

How can I determine whether a system is affected?

Check whether the system runs the Debian linux package and uses the kernel iSCSI target discovery authentication configuration via configfs. Review whether multiple administrative processes or users can concurrently modify the discovery AuthMethod parameter.

What is the mitigation if an update cannot be applied immediately?

Avoid concurrent changes to the iSCSI target discovery AuthMethod parameter. Restrict and serialize administrative access to the relevant configfs configuration so only one update occurs at a time.

DEBIAN-CVE-2026-99206: Debian/linux vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What systems are exposed to this race condition?

What must an attacker or user be able to do to trigger the issue?

How can I determine whether a system is affected?

What is the mitigation if an update cannot be applied immediately?

Company

Resources

Contact

Frequently Asked Questions

What systems are exposed to this race condition?

What must an attacker or user be able to do to trigger the issue?

How can I determine whether a system is affected?

What is the mitigation if an update cannot be applied immediately?