SCSI Command Handling Flaw in Linux Kernel Affects Multiple Products

CVE-2026-43054

What is CVE-2026-43054?

A vulnerability in the Linux kernel's SCSI target component affects the tcm_loop module, specifically in the handling of reset commands. The function tcm_loop_target_reset() improperly returns success without draining in-flight commands, which violates the SCSI error handling contract. This mismanagement can lead to blocked processes and prevents proper LUN unlinking in configfs, as shown by significant task blocking messages. To resolve this, the reset function needs to properly drain outstanding commands before indicating readiness for new commands, similar to practices in other SCSI low-level drivers.

References