Error Handling Issue in Linux Kernel's SCSI Component

CVE-2026-68396

What is CVE-2026-68396?

A vulnerability exists in the Linux kernel related to the SCSI subsystem's error handling mechanisms. Specifically, when utilizing the scsi_schedule_eh function, a race condition may prevent the error handler thread from waking if all commands have timed out or are inactive. The lack of enforced memory ordering between transitioning the host to an error recovery state and counting busy commands creates potential inconsistencies. To mitigate this issue, the solution involves executing the scsi_eh_wakeup function from a new work item, utilizing RCU to ensure the visibility of the error state during execution. This fix is crucial to ensure reliable error handling and system stability.

References