Buffer Overflow in Linux Kernel's iSCSI Target Feature

CVE-2026-90011

What is CVE-2026-90011?

This vulnerability exists in the iSCSI target feature of the Linux kernel due to improper handling of login payloads. Specifically, when the DataSegmentLength of a login PDU exceeds a certain threshold, the allocated buffer does not account for a NUL terminator, leading to potential memory access violations. An unauthenticated attacker can exploit this weakness against a portal if CHAP authentication is not required, allowing for unauthorized access and manipulation of adjacent memory. To mitigate this issue, it is recommended to allocate an additional byte, ensuring that all buffers are properly terminated.

References