Answer in brief
CVE-2026-23216 records a Unknown severity vulnerability in scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=e48354ce078c079996f89d715dfa44814b4eba01 <ba684191437380a07b27666eb4e72748be1ea201 || >=e48354ce078c079996f89d715dfa44814b4eba01 <8518f072fc92921418cd9ed4268dd4f3e9a8fd75 || >=e48354ce078c079996f89d715dfa44814b4eba01 <275016a551ba1a068a3bd6171b18611726b67110 || >=e48354ce078c079996f89d715dfa44814b4eba01 <73b487d44bf4f92942629d578381f89c326ff77f || >=e48354ce078c079996f89d715dfa44814b4eba01 <48fe983e92de2c59d143fe38362ad17ba23ec7f3 || >=e48354ce078c079996f89d715dfa44814b4eba01 <3835e49e146a4e6e7787b29465f1a23379b6ec44 || >=e48354ce078c079996f89d715dfa44814b4eba01 <9411a89e9e7135cc459178fa77a3f1d6191ae903 | ba684191437380a07b27666eb4e72748be1ea201, 8518f072fc92921418cd9ed4268dd4f3e9a8fd75, 275016a551ba1a068a3bd6171b18611726b67110, 73b487d44bf4f92942629d578381f89c326ff77f, 48fe983e92de2c59d143fe38362ad17ba23ec7f3, 3835e49e146a4e6e7787b29465f1a23379b6ec44, 9411a89e9e7135cc459178fa77a3f1d6191ae903 |
| Linux/Linuxgeneric | 3.1 | Not reported |
Published upstream
Feb 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 19, 2026
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() In iscsit_dec_conn_usage_count(), the function calls complete() while holding the conn->conn_usage_lock. As soon as complete() is invoked, the waiter (such as iscsit_close_connection()) may wake up and proceed to free the iscsit_conn structure. If the waiter frees the memory before the current thread reaches spin_unlock_bh(), it results in a KASAN slab-use-after-free as the function attempts to release a lock within the already-freed connection structure. Fix this by releasing the spinlock before calling complete().
Quoted source text, attributed separately from HOL analysis.