{"id":"CVE-2026-99206","published":"2026-10-28T11:17:41.920","lastModified":"2026-10-28T11:17:41.920","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix race in discovery auth updates\n\nSeparate configfs opens can concurrently update the discovery AuthMethod\nparameter. Both callers may free the same value in\niscsi_update_param_value(), causing a double-free.\n\nProtect the lookup and replacement with the discovery TPG access lock,\nas used by the other TPG configfs parameter updates.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/6caa2b3edb7da4f50a38e16561b75fcae21d4099","tags":[]},{"url":"https://git.kernel.org/stable/c/9b07828b133b326cb4fb59f144ca37f8db535999","tags":[]},{"url":"https://git.kernel.org/stable/c/e15b81f602edbdee39c335546f25486a1747f3f0","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}