Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Linux kernel iSCSI driver may read past buffer

CVE-2026-63888 · published 2 months ago
Summary

The iSCSI component in the Linux kernel could read 4 extra bytes when checking data integrity, which could cause system instability. It also had a coding mistake that could free memory twice, potentially leading to crashes. Updating the kernel to the latest version applies the fix and restores safe operation.

What to do
  • Update linux kernel to version 7.0.12.
  • Update canonical linux-hwe-7.0 to version 7.0.0-28.28~24.04.1.
  • Update canonical linux-nvidia-7.0 to version 7.0.0-1016.16~24.04.1.
  • Update canonical linux-riscv-7.0 to version 7.0.0-28.28.1~24.04.3.
  • Update canonical linux to version 7.0.0-28.28.
  • Update canonical linux-aws to version 7.0.0-1009.9.
  • Update canonical linux-azure to version 7.0.0-1010.10.
  • Update canonical linux-azure-fde to version 7.0.0-1009.9.
  • Update canonical linux-gcp to version 7.0.0-1008.8.
  • Update canonical linux-gke to version 7.0.0-1003.4.
  • Update canonical linux-ibm to version 7.0.0-1010.10.
  • Update canonical linux-nvidia to version 7.0.0-1016.16.
  • Update canonical linux-nvidia-bos to version 7.0.0-2016.16.
  • Update canonical linux-oem-7.0 to version 7.0.0-1009.9.
  • Update canonical linux-oracle to version 7.0.0-1008.8.
  • Update canonical linux-raspi to version 7.0.0-1015.15.
  • Update canonical linux-realtime to version 7.0.0-28.28.1.
  • Update canonical linux-riscv to version 7.0.0-28.28.1.
  • Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1035.38.
  • Update canonical linux-hwe-5.15 to version 5.15.0-194.204~20.04.1.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-194.204~20.04.1.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1110.114~20.04.1.
  • Update canonical linux-aws to version 5.15.0-1116.123.
  • Update canonical linux-azure to version 5.15.0-1122.131.
  • Update canonical linux-azure-6.8 to version 6.8.0-1068.76~22.04.1.
  • Update canonical linux-azure-fde to version 5.15.0-1121.130.
  • Update canonical linux-azure-fde-6.8 to version 6.8.0-1066.73~22.04.1.
  • Update canonical linux-gcp to version 5.15.0-1117.127.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1069.77~22.04.1.
  • Update canonical linux-gke to version 5.15.0-1112.118.
  • Update canonical linux-gkeop to version 5.15.0-1099.107.
  • Update canonical linux-ibm to version 5.15.0-1110.114.
  • Update canonical linux-intel-iotg to version 5.15.0-1111.117.
  • Update canonical linux-kvm to version 5.15.0-1108.113.
  • Update canonical linux-lowlatency to version 5.15.0-194.204.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-142.142.1~22.04.1.
  • Update canonical linux-oracle to version 5.15.0-1113.119.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1062.65~22.04.1.
  • Update canonical linux-riscv-6.8 to version 6.8.0-142.142~22.04.1.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1079.83.
  • Update canonical linux-bluefield to version 5.15.0-1100.102.
  • Update canonical linux-aws-fips to version 5.15.0-1116.123+fips1.
  • Update canonical linux-azure-fips to version 5.15.0-1122.131+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1116.126+fips1.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1108.110.
  • Update canonical linux-realtime to version 5.15.0-1115.124.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1060.61~22.04.1.
  • Update canonical linux to version 6.8.0-142.142.
  • Update canonical linux-azure to version 6.8.0-1068.76.
  • Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
  • Update canonical linux-azure-fde to version 6.8.0-1066.73.
  • Update canonical linux-gcp to version 6.8.0-1069.77.
  • Update canonical linux-gke to version 6.8.0-1064.72.
  • Update canonical linux-gkeop to version 6.8.0-1050.54.
  • Update canonical linux-ibm to version 6.8.0-1065.66.
  • Update canonical linux-lowlatency to version 6.8.0-142.142.1.
  • Update canonical linux-oracle to version 6.8.0-1062.65.
  • Update canonical linux-raspi to version 6.8.0-1065.69.
  • Update canonical linux-bluefield to version 6.8.0-1031.36.
  • Update canonical linux-azure-fips to version 6.8.0-1068.76+fips1.
  • Update canonical linux-fips to version 6.8.0-142.142+fips1.
  • Update canonical linux-gcp-fips to version 6.8.0-1068.76+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2054.56.
  • Update canonical linux-realtime to version 6.8.1-1060.61.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1110.114~20.04.1.
  • Update canonical linux-aws-5.15 to version 5.15.0-1116.123~20.04.1.
  • Update canonical linux-azure-5.15 to version 5.15.0-1122.131~20.04.1.
  • Update canonical linux-azure-fde-5.15 to version 5.15.0-1121.130~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1111.117~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1068.70~20.04.1.
  • Update canonical linux to version 5.15.0-194.204.
  • Update canonical linux-nvidia to version 5.15.0-1111.112.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1063.66~22.04.1.
  • Update canonical linux-nvidia to version 6.8.0-1063.66.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1063.66.1.
  • Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
  • Update canonical linux-aws-fips to version 6.8.0-1065.68+fips1.
  • Update debian linux to version 6.1.176-1.
  • Update debian linux to version 6.12.94-1.
  • Update debian linux to version 7.0.12-1.
  • Update canonical linux-aws-6.8 to version 6.8.0-1065.68~22.04.1.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1068.70.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1057.57.
  • Update canonical linux-aws to version 6.8.0-1065.68.
  • Update canonical linux-fips to version 5.15.0-194.204+fips1.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1118.128~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1114.120~20.04.1.
  • Update canonical linux-raspi to version 5.15.0-1110.113.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1066.67~22.04.1.
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
Affected software
Ecosystem VendorProductAffected versions
Linux linux kernel >= 6.19.0, < 7.0.12
Fix: upgrade to 7.0.12
Ubuntu:Pro:14.04:LTS canonical linux All versions
Ubuntu:Pro:14.04:LTS canonical linux-aws All versions
Ubuntu:Pro:14.04:LTS canonical linux-azure All versions
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe All versions
Ubuntu:Pro:16.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:16.04:LTS canonical linux-hwe All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle All versions
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-4.15 All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1116.123~20.04.1
Fix: upgrade to 5.15.0-1116.123~20.04.1
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1122.131~20.04.1
Fix: upgrade to 5.15.0-1122.131~20.04.1
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-fde-5.15 < 5.15.0-1121.130~20.04.1
Fix: upgrade to 5.15.0-1121.130~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-bluefield All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1118.128~20.04.1
Fix: upgrade to 5.15.0-1118.128~20.04.1
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Showing 50 of 224. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-194.204~20.04.1
Fix: upgrade to 5.15.0-194.204~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1110.114~20.04.1
Fix: upgrade to 5.15.0-1110.114~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1111.117~20.04.1
Fix: upgrade to 5.15.0-1111.117~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-iot All versions
Ubuntu:Pro:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-194.204~20.04.1
Fix: upgrade to 5.15.0-194.204~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1068.70~20.04.1
Fix: upgrade to 5.15.0-1068.70~20.04.1
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1114.120~20.04.1
Fix: upgrade to 5.15.0-1114.120~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-raspi All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:Pro:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1110.114~20.04.1
Fix: upgrade to 5.15.0-1110.114~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1065.68~22.04.1
Fix: upgrade to 6.8.0-1065.68~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1068.76~22.04.1
Fix: upgrade to 6.8.0-1068.76~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.8 < 6.8.0-1066.73~22.04.1
Fix: upgrade to 6.8.0-1066.73~22.04.1
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1069.77~22.04.1
Fix: upgrade to 6.8.0-1069.77~22.04.1
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 All versions
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1066.67~22.04.1
Fix: upgrade to 6.8.0-1066.67~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1111.117
Fix: upgrade to 5.15.0-1111.117
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-194.204
Fix: upgrade to 5.15.0-194.204
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-142.142.1~22.04.1
Fix: upgrade to 6.8.0-142.142.1~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1111.112
Fix: upgrade to 5.15.0-1111.112
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1063.66~22.04.1
Fix: upgrade to 6.8.0-1063.66~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1068.70
Fix: upgrade to 5.15.0-1068.70
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1057.57
Fix: upgrade to 5.15.0-1057.57
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1062.65~22.04.1
Fix: upgrade to 6.8.0-1062.65~22.04.1
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-142.142~22.04.1
Fix: upgrade to 6.8.0-142.142~22.04.1
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1060.61~22.04.1
Fix: upgrade to 6.8.1-1060.61~22.04.1
Ubuntu:24.04:LTS canonical linux-aws-6.14 All versions
Ubuntu:24.04:LTS canonical linux-aws-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-7.0 < 7.0.0-1014.14~24.04.1
Fix: upgrade to 7.0.0-1014.14~24.04.1
Ubuntu:24.04:LTS canonical linux-azure-fde-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.17 All versions
Ubuntu:24.04:LTS canonical linux-gcp-7.0 < 7.0.0-1011.11~24.04.1
Fix: upgrade to 7.0.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.14 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.17 All versions
Ubuntu:24.04:LTS canonical linux-hwe-7.0 < 7.0.0-28.28~24.04.1
Fix: upgrade to 7.0.0-28.28~24.04.1
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-6.17 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-7.0 < 7.0.0-1016.16~24.04.1
Fix: upgrade to 7.0.0-1016.16~24.04.1
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1063.66.1
Fix: upgrade to 6.8.0-1063.66.1
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.17 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-oracle-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oracle-6.17 All versions
Ubuntu:24.04:LTS canonical linux-oracle-7.0 < 7.0.0-1011.11~24.04.1
Fix: upgrade to 7.0.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.14 All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.17 All versions
Ubuntu:24.04:LTS canonical linux-riscv-7.0 < 7.0.0-28.28.1~24.04.3
Fix: upgrade to 7.0.0-28.28.1~24.04.3
Ubuntu:24.04:LTS canonical linux-xilinx All versions
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.14 All versions
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.17 All versions
Ubuntu:26.04:LTS canonical linux < 7.0.0-28.28
Fix: upgrade to 7.0.0-28.28
Ubuntu:26.04:LTS canonical linux-aws < 7.0.0-1009.9
Fix: upgrade to 7.0.0-1009.9
Ubuntu:26.04:LTS canonical linux-azure < 7.0.0-1010.10
Fix: upgrade to 7.0.0-1010.10
Ubuntu:26.04:LTS canonical linux-azure-fde < 7.0.0-1009.9
Fix: upgrade to 7.0.0-1009.9
Ubuntu:26.04:LTS canonical linux-gcp < 7.0.0-1008.8
Fix: upgrade to 7.0.0-1008.8
Ubuntu:26.04:LTS canonical linux-gke < 7.0.0-1003.4
Fix: upgrade to 7.0.0-1003.4
Ubuntu:26.04:LTS canonical linux-ibm < 7.0.0-1010.10
Fix: upgrade to 7.0.0-1010.10
Ubuntu:26.04:LTS canonical linux-nvidia < 7.0.0-1016.16
Fix: upgrade to 7.0.0-1016.16
Ubuntu:26.04:LTS canonical linux-nvidia-bos < 7.0.0-2016.16
Fix: upgrade to 7.0.0-2016.16
Ubuntu:26.04:LTS canonical linux-oem-7.0 < 7.0.0-1009.9
Fix: upgrade to 7.0.0-1009.9
Ubuntu:26.04:LTS canonical linux-oracle < 7.0.0-1008.8
Fix: upgrade to 7.0.0-1008.8
Ubuntu:26.04:LTS canonical linux-raspi < 7.0.0-1015.15
Fix: upgrade to 7.0.0-1015.15
Ubuntu:26.04:LTS canonical linux-realtime < 7.0.0-28.28.1
Fix: upgrade to 7.0.0-28.28.1
Ubuntu:26.04:LTS canonical linux-riscv < 7.0.0-28.28.1
Fix: upgrade to 7.0.0-28.28.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1035.38
Fix: upgrade to 6.8.0-1035.38
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1116.123
Fix: upgrade to 5.15.0-1116.123
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1122.131
Fix: upgrade to 5.15.0-1122.131
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1121.130
Fix: upgrade to 5.15.0-1121.130
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1117.127
Fix: upgrade to 5.15.0-1117.127
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1112.118
Fix: upgrade to 5.15.0-1112.118
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1099.107
Fix: upgrade to 5.15.0-1099.107
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1110.114
Fix: upgrade to 5.15.0-1110.114
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1108.113
Fix: upgrade to 5.15.0-1108.113
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1113.119
Fix: upgrade to 5.15.0-1113.119
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1079.83
Fix: upgrade to 5.15.0-1079.83
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1100.102
Fix: upgrade to 5.15.0-1100.102
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1116.123+fips1
Fix: upgrade to 5.15.0-1116.123+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips < 5.15.0-1122.131+fips1
Fix: upgrade to 5.15.0-1122.131+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1116.126+fips1
Fix: upgrade to 5.15.0-1116.126+fips1
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1108.110
Fix: upgrade to 5.15.0-1108.110
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1115.124
Fix: upgrade to 5.15.0-1115.124
Ubuntu:24.04:LTS canonical linux < 6.8.0-142.142
Fix: upgrade to 6.8.0-142.142
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1068.76
Fix: upgrade to 6.8.0-1068.76
Ubuntu:24.04:LTS canonical linux-azure-fde < 6.8.0-1066.73
Fix: upgrade to 6.8.0-1066.73
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1069.77
Fix: upgrade to 6.8.0-1069.77
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1064.72
Fix: upgrade to 6.8.0-1064.72
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1050.54
Fix: upgrade to 6.8.0-1050.54
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1065.66
Fix: upgrade to 6.8.0-1065.66
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-142.142.1
Fix: upgrade to 6.8.0-142.142.1
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1062.65
Fix: upgrade to 6.8.0-1062.65
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1065.69
Fix: upgrade to 6.8.0-1065.69
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield < 6.8.0-1031.36
Fix: upgrade to 6.8.0-1031.36
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-azure-fips < 6.8.0-1068.76+fips1
Fix: upgrade to 6.8.0-1068.76+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-142.142+fips1
Fix: upgrade to 6.8.0-142.142+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-gcp-fips < 6.8.0-1068.76+fips1
Fix: upgrade to 6.8.0-1068.76+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2054.56
Fix: upgrade to 6.8.0-2054.56
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1060.61
Fix: upgrade to 6.8.1-1060.61
Ubuntu:22.04:LTS canonical linux < 5.15.0-194.204
Fix: upgrade to 5.15.0-194.204
Ubuntu:24.04:LTS canonical linux-azure-fde-7.0 All versions
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1063.66
Fix: upgrade to 6.8.0-1063.66
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-aws-fips < 6.8.0-1065.68+fips1
Fix: upgrade to 6.8.0-1065.68+fips1
Debian:12 debian linux < 6.1.176-1
Fix: upgrade to 6.1.176-1
Debian:13 debian linux < 6.12.94-1
Fix: upgrade to 6.12.94-1
Debian:14 debian linux < 7.0.12-1
Fix: upgrade to 7.0.12-1
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1065.68
Fix: upgrade to 6.8.0-1065.68
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-194.204+fips1
Fix: upgrade to 5.15.0-194.204+fips1
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1110.113
Fix: upgrade to 5.15.0-1110.113
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Original advisory text
scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

Two latent bugs in the Text-phase handler, both present since the
original LIO integration in commit e48354ce078c ("iscsi-target: Add
iSCSI fabric support for target v4.1"):

1) DataDigest CRC buffer overread (4 bytes past text_in).

text_in is kzalloc()'d at ALIGN(payload_length, 4). rx_size is then
incremented by ISCSI_CRC_LEN to make room for the received DataDigest
in the iovec, but the same (now-bumped) rx_size is passed as the
buffer length to iscsit_crc_buf():

if (conn->conn_ops->DataDigest) {
...
rx_size += ISCSI_CRC_LEN;
}
...
if (conn->conn_ops->DataDigest) {
data_crc = iscsit_crc_buf(text_in, rx_size, 0, NULL);

iscsit_crc_buf() walks rx_size bytes of text_in with crc32c(), so
when DataDigest is negotiated it reads 4 bytes past the end of the
text_in allocation. KASAN reproduces this directly on the unpatched
mainline tree as slab-out-of-bounds in crc32c() called from the Text
PDU path. The OOB bytes feed crc32c() and are then compared against
the initiator-supplied checksum, so the value does not flow back to
the attacker, but the kernel does read past the buffer on every Text
PDU with DataDigest=CRC32C.

Fix by passing the actual padded payload length
(ALIGN(payload_length, 4)) that was used for the kzalloc().

2) Stale cmd->text_in_ptr re-free (double-free) on ERL>0 bad DataDigest
drop.

On DataDigest mismatch with ErrorRecoveryLevel > 0 the handler
silently drops the PDU and lets the initiator plug the CmdSN gap:

kfree(text_in);
return 0;

cmd->text_in_ptr still points at the freed buffer. The next Text
Request on the same ITT re-enters iscsit_setup_text_cmd(), which
unconditionally does

kfree(cmd->text_in_ptr);
cmd->text_in_ptr = NULL;

freeing the same pointer a second time. Session teardown via
iscsit_release_cmd() has the same shape and hits the same double-free
if the connection is dropped before a second Text Request arrives.

On an unmodified mainline tree the bug-1 CRC overread fires first on
the initial valid Text Request and perturbs the subsequent state, so
#4 was isolated by building a kernel with only the bug-1 hunk of this
patch applied plus temporary printk() observability around the three
relevant kfree() sites. The observability prints are not part of
this patch. On that build, a three-PDU Text Request sequence after
login produces two back-to-back splats:

BUG: KASAN: double-free in iscsit_setup_text_cmd+0x??
BUG: KASAN: double-free in iscsit_release_cmd+0x??

showing the same pointer freed in the ERL>0 drop path and again in
iscsit_setup_text_cmd() (next Text Request on the same ITT) and once
more in iscsit_release_cmd() (session teardown). On distro kernels
with CONFIG_SLAB_FREELIST_HARDENED=y (default) the double-free
becomes a remote kernel BUG(); on non-hardened kernels it corrupts
the slab freelist.

Fix by clearing cmd->text_in_ptr after the kfree() in the ERL>0 drop
path. With both hunks applied #4 is directly observable on the stock
tree without observability printks; fixing bug-1 alone would mask #4
less, not more, so the hunks are submitted together.

Both fixes are one-liners. The Text PDU state machine is unchanged and
the wire protocol is unaffected.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Timeline
Published19 Jul 2026
Updated12 Oct 2026
First seen19 Jul 2026
Sources
CVE-2026-63888 · OSV
CVE-2026-63888 · NVD
UBUNTU-CVE-2026-63888 · OSV
DEBIAN-CVE-2026-63888 · OSV
ROOT-OS-UBUNTU-2204-CVE-2026-63888 · OSV
Track software like this
Free during beta