Linux Kernel Vulnerability in vhost-scsi Related to T10 PI Handling

CVE-2026-74703

What is CVE-2026-74703?

A vulnerability exists in the Linux kernel's vhost-scsi component related to the validation of T10 PI protection bytes during request mapping. When T10 PI is negotiated, improper handling could allow a malformed request to claim protection bytes that either cover or exceed the payload length, leading to serious issues. This could result in zero data SGL counts reaching the sg_alloc_table_chained() function, potentially causing system instability. To mitigate this risk, the kernel now rejects protection lengths exceeding the payload and ensures correct error propagation from the protection SGL calculation before memory allocation.

References