Interrupt Handling Vulnerability in Linux Kernel Affecting SCSI Target Components

CVE-2026-99207

What is CVE-2026-99207?

A vulnerability in the Linux kernel's SCSI target implementation arises from inadequate interrupt handling while holding the delayed_cmd_lock. This flaw occurs in the target_do_delayed_work function, where interrupts remain enabled while a spin lock is held, potentially leading to a deadlock scenario when certain conditions are met. Specifically, if complete_type=1 is utilized, it allows for command completions to occur in interrupt context, contrary to the assumptions made during the lock acquisition. This can create a situation where multiple command completions are queued, risking a prolonged wait on the lock. Implementing proper locking mechanisms is crucial to mitigate such risks.

References