SCSI Sense Buffer Vulnerability in Linux Kernel by The Linux Foundation

CVE-2026-74557

What is CVE-2026-74557?

A vulnerability exists in the Linux kernel impacting the handling of SCSI sense data. The issue arises in the iscsi_scsi_cmd_rsp() function where the sense data is copied from a target-supplied data segment without proper bounds checking. When a target returns a SCSI Response with the data length equal to the sense length, a memcpy operation may read beyond the intended buffer, leading to stale data being introduced into the sense buffer. This situation can expose information that should not be accessible to userspace applications, thereby representing a potential security risk.

References