CVE-2026-98357

{
  "etk_id": "ETK-2026-1299",
  "cve_id": "CVE-2026-98357",
  "display_id": "CVE-2026-98357",
  "ghsa_id": "GHSA-888p-vhhf-cr6c",
  "euvd_id": "EUVD-2026-93342",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Linux kernel iSER target use-after-free race",
  "summary": "The Linux kernel iSER target path can access freed connection memory when deferred control-PDU completion work overlaps connection teardown. An attacker able to interact with an affected iSER/iSCSI target may trigger the race during connection closure.",
  "mitigation": "Update to a kernel release containing the upstream iSER connection-teardown synchronization fix. Until then, disable or restrict access to the iSER/iSCSI target service where it is not required.",
  "vendor": "Linux",
  "product": "Linux",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= b8d26b3be8b33682cf163274ed07479a70554633, < f5613acbe2e346d5c466ef0bd264fca936b69f82",
        ">= b8d26b3be8b33682cf163274ed07479a70554633, < ccdb1523f12bc8a9646de65055d1aafed9e9bcc6",
        ">= b8d26b3be8b33682cf163274ed07479a70554633, < 0e230917670c6e6fe3243abfa11299fcbe05b1f4",
        ">= b8d26b3be8b33682cf163274ed07479a70554633, < 505b242d9351690d1385bbe508ab4666f60363ce",
        ">= b8d26b3be8b33682cf163274ed07479a70554633, < 7edb8a88d6c76237c8b4435765bee1009e26a50a",
        ">= b8d26b3be8b33682cf163274ed07479a70554633, < b96b8b3e41c308f606ffd10cfef1a7b9f97414cd",
        ">= b8d26b3be8b33682cf163274ed07479a70554633, < 7908fbc597a694bbd99bfb59ece73bc3daded68e",
        ">= b8d26b3be8b33682cf163274ed07479a70554633, < a8fe3dfce8c0d8a76dc3d8486a5bff5feebe156f"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "f5613acbe2e346d5c466ef0bd264fca936b69f82",
        "ccdb1523f12bc8a9646de65055d1aafed9e9bcc6",
        "0e230917670c6e6fe3243abfa11299fcbe05b1f4",
        "505b242d9351690d1385bbe508ab4666f60363ce",
        "7edb8a88d6c76237c8b4435765bee1009e26a50a",
        "b96b8b3e41c308f606ffd10cfef1a7b9f97414cd",
        "7908fbc597a694bbd99bfb59ece73bc3daded68e",
        "a8fe3dfce8c0d8a76dc3d8486a5bff5feebe156f"
      ],
      "package_name": "Linux",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        "3.10"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Linux",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 8.1,
  "cvss_src": "nvd",
  "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0036,
  "epss_percentile": 0.2814,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 8.818602816666667,
  "t0_at": "2026-10-06T08:46:44.216000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-06T08:46:44.216000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-06T08:46:44.216000+00:00",
      "url": "https://github.com/advisories/GHSA-888p-vhhf-cr6c"
    }
  }
}