CVE-2026-23296

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

scsi: core: Fix refcount leak for tagset_refcnt

This leak will cause a hang when tearing down the SCSI host. For example,

iscsid hangs with the following call trace:

[130120.652718] scsi_alloc_sdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured

PID: 2528 TASK: ffff9d0408974e00 CPU: 3 COMMAND: "iscsid"

#0 [ffffb5b9c134b9e0] __schedule at ffffffff860657d4

#1 [ffffb5b9c134ba28] schedule at ffffffff86065c6f

#2 [ffffb5b9c134ba40] schedule_timeout at ffffffff86069fb0

#3 [ffffb5b9c134bab0] __wait_for_common at ffffffff8606674f

#4 [ffffb5b9c134bb10] scsi_remove_host at ffffffff85bfe84b

#5 [ffffb5b9c134bb30] iscsi_sw_tcp_session_destroy at ffffffffc03031c4 [iscsi_tcp]

#6 [ffffb5b9c134bb48] iscsi_if_recv_msg at ffffffffc0292692 [scsi_transport_iscsi]

#7 [ffffb5b9c134bb98] iscsi_if_rx at ffffffffc02929c2 [scsi_transport_iscsi]

#8 [ffffb5b9c134bbf0] netlink_unicast at fffff

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References