Every CVE Search/ Get API key

CVE-2026-44943

remote limited file-write as root via discovery in open-iscsi

6.9 MediumFix available

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.39%Up 0.1 points since Jul 30, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.9

remote limited file-write as root via discovery in open-iscsi

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Record
CVE-2026-44943
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Weakness
CWE-22
Updated
2026-11-02
EUVDEUVD-2026-50311 6.9

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Record
EUVD-2026-50311
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-36cw-9hwh-mr3c 6.9

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability...

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Record
GHSA-36cw-9hwh-mr3c
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-22
Updated
2026-11-02
NVD 6.9

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Record
CVE-2026-44943
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-22
Updated
2026-11-02
OSV 6.9

remote limited file-write as root via discovery in open-iscsi

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Record
CVE-2026-44943
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Weakness
CWE-22
Updated
2026-11-02
OSVDEBIAN-CVE-2026-44943 6.9

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Record
DEBIAN-CVE-2026-44943
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
Show 25 moreShow less
OSVOESA-2026-3337 8.7

open-iscsi security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Record
OESA-2026-3337
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3338 8.7

open-iscsi security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Record
OESA-2026-3338
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3339 8.7

open-iscsi security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.

This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44944)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Record
OESA-2026-3339
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3340 8.7

open-iscsi security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Record
OESA-2026-3340
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3407 8.7

open-iscsi security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Record
OESA-2026-3407
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVRHSA-2026:53844 8.6

Red Hat Security Advisory: iscsi-initiator-utils security, bug fix, and enhancement update

Record
RHSA-2026:53844
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:53845 8.6

Red Hat Security Advisory: iscsi-initiator-utils security, bug fix, and enhancement update

Record
RHSA-2026:53845
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:60427 8.6

Red Hat Security Advisory: iscsi-initiator-utils security update

Record
RHSA-2026:60427
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:60428 8.6

Red Hat Security Advisory: iscsi-initiator-utils security, bug fix, and enhancement update

Record
RHSA-2026:60428
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:61679 8.6

Red Hat Security Advisory: iscsi-initiator-utils security, bug fix, and enhancement update

Record
RHSA-2026:61679
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:62029 8.6

Red Hat Security Advisory: iscsi-initiator-utils security update

Record
RHSA-2026:62029
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:53844 8.6

Important: iscsi-initiator-utils security, bug fix, and enhancement update

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.

Security Fix(es):

  • open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)

  • open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)

Bug Fix(es) and Enhancement(s):

  • [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [rhel-9.8.z] (JIRA:Rocky Linux-191897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:53844
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:53845 8.6

Important: iscsi-initiator-utils security, bug fix, and enhancement update

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.

Security Fix(es):

  • open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)

  • open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)

Bug Fix(es) and Enhancement(s):

  • [FJ10.1 Bug]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [rhel-10.2.z] (JIRA:Rocky Linux-191899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:53845
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2026-44943 6.9

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Record
UBUNTU-CVE-2026-44943
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVALSA-2026:53844 No score

Important: iscsi-initiator-utils security, bug fix, and enhancement update

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.

Security Fix(es):

  • open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)
  • open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)

Bug Fix(es) and Enhancement(s):

  • [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [almalinux-9.8.z] (JIRA:AlmaLinux-191897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:53844
Updated
2026-11-02
OSVALSA-2026:53845 No score

Important: iscsi-initiator-utils security, bug fix, and enhancement update

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.

Security Fix(es):

  • open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)
  • open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)

Bug Fix(es) and Enhancement(s):

  • [FJ10.1 Bug]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [almalinux-10.2.z] (JIRA:AlmaLinux-191899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:53845
Updated
2026-11-02
OSVAZL-94428 No score

CVE-2026-44943 affecting package iscsi-initiator-utils for versions less than 2.1.12-1

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Record
AZL-94428
Updated
2026-11-02
OSVCLSA-2026-1787316164 No score

iscsi-initiator-utils: Fix of 2 CVEs

  • CVE-2026-44943: path traversal via unvalidated IQN in discovery records
  • CVE-2026-44944: iscsiuio control socket authorization bypass
Record
CLSA-2026-1787316164
Updated
2026-11-02
OSVCLSA-2026-1787396809 No score

iscsi-initiator-utils: Fix of 2 CVEs

  • CVE-2026-44943: path traversal via unvalidated IQN in discovery records
  • CVE-2026-44944: iscsiuio control socket authorization bypass
Record
CLSA-2026-1787396809
Updated
2026-11-02
OSVopenSUSE-SU-2026:11317-1 No score

iscsiuio-0.7.8.8-112.1 on GA media

These are all security issues fixed in the iscsiuio-0.7.8.8-112.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11317-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21580-1 No score

Security update for open-iscsi

This update for open-iscsi fixes the following issues:

Update to version 2.1.12.suse+0.8f77cf16:

  • CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records (bsc#1268353).
  • CVE-2026-44944: incorrect authorization allows unpriviledged local users to use the isscsiuio control socket (bsc#1268352).

Changes for open-iscsi:

  • Version 2.1.12.suse+0.8f77cf16:
    • Fix security issues recently discovered by Keith at Linneman Labs.
    • iscsi-init.service: use iscsi-gen-initiatorname.
    • iscsi-gen-initiatorname: use @IQN_PREFIX@ as default.
    • Avoid possible double free of found in idbm_rec_update_param.
    • iscsi: validate interface IP against target address family.
Record
openSUSE-SU-2026:21580-1
Updated
2026-11-02
OSVSUSE-SU-2026:23157-1 No score

Security update for open-iscsi

This update for open-iscsi fixes the following issues:

Update to version 2.1.12.suse+0.8f77cf16:

  • CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records (bsc#1268353).
  • CVE-2026-44944: incorrect authorization allows unpriviledged local users to use the isscsiuio control socket (bsc#1268352).

Changes for open-iscsi:

  • Version 2.1.12.suse+0.8f77cf16:
    • Fix security issues recently discovered by Keith at Linneman Labs.
    • iscsi-init.service: use iscsi-gen-initiatorname.
    • iscsi-gen-initiatorname: use @IQN_PREFIX@ as default.
    • Avoid possible double free of found in idbm_rec_update_param.
    • iscsi: validate interface IP against target address family.
Record
SUSE-SU-2026:23157-1
Updated
2026-11-02
OSVSUSE-SU-2026:23223-1 No score

Security update for open-iscsi

This update for open-iscsi fixes the following issues:

Update to version 2.1.12.suse+0.8f77cf16:

  • CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records (bsc#1268353).
  • CVE-2026-44944: incorrect authorization allows unpriviledged local users to use the isscsiuio control socket (bsc#1268352).

Changes for open-iscsi:

  • Version 2.1.12.suse+0.8f77cf16:
    • Fix security issues recently discovered by Keith at Linneman Labs.
    • iscsi-init.service: use iscsi-gen-initiatorname.
    • iscsi-gen-initiatorname: use @IQN_PREFIX@ as default.
    • Avoid possible double free of found in idbm_rec_update_param.
    • iscsi: validate interface IP against target address family.
Record
SUSE-SU-2026:23223-1
Updated
2026-11-02
OSVSUSE-SU-2026:23235-1 No score

Security update for open-iscsi

This update for open-iscsi fixes the following issues:

Update to version 2.1.12.suse+0.8f77cf16:

  • CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records (bsc#1268353).
  • CVE-2026-44944: incorrect authorization allows unpriviledged local users to use the isscsiuio control socket (bsc#1268352).

Changes for open-iscsi:

  • Version 2.1.12.suse+0.8f77cf16:
    • Fix security issues recently discovered by Keith at Linneman Labs.
    • iscsi-init.service: use iscsi-gen-initiatorname.
    • iscsi-gen-initiatorname: use @IQN_PREFIX@ as default.
    • Avoid possible double free of found in idbm_rec_update_param.
    • iscsi: validate interface IP against target address family.
Record
SUSE-SU-2026:23235-1
Updated
2026-11-02
OSVSUSE-SU-2026:3647-1 No score

Security update for open-iscsi

This update for open-iscsi fixes the following issues:

  • CVE-2026-44943: remote file-write as root via discovery (bsc#1268353).
  • CVE-2026-44944: iscsiuio control-socket auth bypass (bsc#1268352).

Changes for open-iscsi:

  • Update to version 2.1.12.suse+0.8f77cf16:
  • Preparing for version 2.1.12 (#536)
  • iscsi-init.service: Use iscsi-gen-initiatorname
  • iscsi-gen-initiatorname use @IQN_PREFIX@ as default
  • avoid possible double free of found in idbm_rec_update_param (#528)
  • iscsi: validate interface IP against target address family (#527)
  • Update to version 2.1.11.suse+88.8e0635b3:
  • Make iface.example a doc file. (#526)
  • Updated SPEC file to deliver iface.example as a %doc file, no longer in the database directory.
  • Update to version 2.1.11.suse+85.4ef97a15:
  • Fix unused variable warning in usr/io.c (#524)
  • Remove old rpm subdirectory, no longer needed.
  • Add tcp.congestion_control configuration option (#520)
  • Small cleanups for firmware discovery. (#522)
  • Fix incorrect parsing of node.discovery_type 'static' and 'fw' (#518)
  • iscsi_net_util: avoid copying NULL pointers with strlcpy() (#515)
  • iscsi: delay reconnect until interface has valid IP. (#511)
Record
SUSE-SU-2026:3647-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
iscsi-initiator-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 6.2.1.11-1.git4b3e853.el9_8.2
6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-iscsiuio
AlmaLinux:9
From an advisory covering 2 CVEs
 before 6.2.1.11-1.git4b3e853.el9_8.2
6.2.1.11-1.git4b3e853.el9_8.2
python3-iscsi-initiator-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 6.2.1.11-1.git4b3e853.el9_8.2
6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils
AlmaLinux:10
From an advisory covering 2 CVEs
 before 6.2.1.11-1.git4b3e853.el10_2.2
6.2.1.11-1.git4b3e853.el10_2.2
iscsi-initiator-utils-iscsiuio
AlmaLinux:10
From an advisory covering 2 CVEs
 before 6.2.1.11-1.git4b3e853.el10_2.2
6.2.1.11-1.git4b3e853.el10_2.2
python3-iscsi-initiator-utils
AlmaLinux:10
From an advisory covering 2 CVEs
 before 6.2.1.11-1.git4b3e853.el10_2.2
6.2.1.11-1.git4b3e853.el10_2.2
iscsi-initiator-utils
Azure Linux:3
 before 2.1.12-1
2.1.12-1
iscsi-initiator-utils
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 6.2.1.9-1.gita65a472.el9_6.tuxcare.els1
6.2.1.9-1.gita65a472.el9_6.tuxcare.els1
iscsi-initiator-utils-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 6.2.1.9-1.gita65a472.el9_6.tuxcare.els1
6.2.1.9-1.gita65a472.el9_6.tuxcare.els1
iscsi-initiator-utils-iscsiuio
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 6.2.1.9-1.gita65a472.el9_6.tuxcare.els1
6.2.1.9-1.gita65a472.el9_6.tuxcare.els1
Show 87 moreShow less
Affected packages
PackageAffectedFixed
python3-iscsi-initiator-utils
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 6.2.1.9-1.gita65a472.el9_6.tuxcare.els1
6.2.1.9-1.gita65a472.el9_6.tuxcare.els1
iscsi-initiator-utils
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 6.2.1.4-3.git2a8f9d8.el9_2.tuxcare.els1
6.2.1.4-3.git2a8f9d8.el9_2.tuxcare.els1
iscsi-initiator-utils-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 6.2.1.4-3.git2a8f9d8.el9_2.tuxcare.els1
6.2.1.4-3.git2a8f9d8.el9_2.tuxcare.els1
iscsi-initiator-utils-iscsiuio
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 6.2.1.4-3.git2a8f9d8.el9_2.tuxcare.els1
6.2.1.4-3.git2a8f9d8.el9_2.tuxcare.els1
python3-iscsi-initiator-utils
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 6.2.1.4-3.git2a8f9d8.el9_2.tuxcare.els1
6.2.1.4-3.git2a8f9d8.el9_2.tuxcare.els1
open-iscsi
Debian:12
 before 2.1.8-1+deb12u1, plus listed versions
2.1.8-1
2.1.8-1+deb12u1
open-iscsi
Debian:13
 All versions, plus listed versions
2.1.11-12.1.11-1+deb13u12.1.11-1+deb13u22.1.11-22.1.11-3
Show 6 moreShow less
2.1.11-42.1.11-52.1.11-62.1.12-12.1.12-22.1.13-1
 None known
open-iscsi
Debian:14
 before 2.1.12-1, plus listed versions
2.1.11-12.1.11-22.1.11-32.1.11-42.1.11-52.1.11-6
2.1.12-1
open-iscsi
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 2.1.5-17.oe2403sp1
2.1.5-17.oe2403sp1
open-iscsi
openEuler:24.03-LTS-SP3
From an advisory covering 2 CVEs
 before 2.1.5-17.oe2403sp3
2.1.5-17.oe2403sp3
open-iscsi
openEuler:20.03-LTS-SP4
From an advisory covering 3 CVEs
 before 2.1.1-17.oe2003sp4
2.1.1-17.oe2003sp4
open-iscsi
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 2.1.5-17.oe2203sp4
2.1.5-17.oe2203sp4
open-iscsi
openEuler:24.03-LTS-SP4
From an advisory covering 2 CVEs
 before 2.1.5-17.oe2403sp4
2.1.5-17.oe2403sp4
iscsi-initiator-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-iscsiuio-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
python3-iscsi-initiator-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
python3-iscsi-initiator-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-iscsiuio
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-iscsiuio-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
python3-iscsi-initiator-utils-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el10_2.2
0:6.2.1.11-1.git4b3e853.el10_2.2
iscsi-initiator-utils-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el10_2.2
0:6.2.1.11-1.git4b3e853.el10_2.2
iscsi-initiator-utils-iscsiuio-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el10_2.2
0:6.2.1.11-1.git4b3e853.el10_2.2
python3-iscsi-initiator-utils
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el10_2.2
0:6.2.1.11-1.git4b3e853.el10_2.2
python3-iscsi-initiator-utils-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el10_2.2
0:6.2.1.11-1.git4b3e853.el10_2.2
iscsi-initiator-utils
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el10_2.2
0:6.2.1.11-1.git4b3e853.el10_2.2
iscsi-initiator-utils-iscsiuio
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el10_2.2
0:6.2.1.11-1.git4b3e853.el10_2.2
iscsi-initiator-utils-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_4.2
0:6.2.1.9-1.gita65a472.el9_4.2
iscsi-initiator-utils-debugsource
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_4.2
0:6.2.1.9-1.gita65a472.el9_4.2
iscsi-initiator-utils-iscsiuio-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_4.2
0:6.2.1.9-1.gita65a472.el9_4.2
python3-iscsi-initiator-utils
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_4.2
0:6.2.1.9-1.gita65a472.el9_4.2
python3-iscsi-initiator-utils-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_4.2
0:6.2.1.9-1.gita65a472.el9_4.2
iscsi-initiator-utils
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_4.2
0:6.2.1.9-1.gita65a472.el9_4.2
iscsi-initiator-utils-debuginfo
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_4.2
0:6.2.1.9-1.gita65a472.el9_4.2
iscsi-initiator-utils-debugsource
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_4.2
0:6.2.1.9-1.gita65a472.el9_4.2
iscsi-initiator-utils-iscsiuio
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_4.2
0:6.2.1.9-1.gita65a472.el9_4.2
iscsi-initiator-utils-iscsiuio-debuginfo
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_4.2
0:6.2.1.9-1.gita65a472.el9_4.2
python3-iscsi-initiator-utils-debuginfo
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_4.2
0:6.2.1.9-1.gita65a472.el9_4.2
iscsi-initiator-utils-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_6.3
0:6.2.1.9-1.gita65a472.el9_6.3
iscsi-initiator-utils-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_6.3
0:6.2.1.9-1.gita65a472.el9_6.3
iscsi-initiator-utils-iscsiuio-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_6.3
0:6.2.1.9-1.gita65a472.el9_6.3
python3-iscsi-initiator-utils
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_6.3
0:6.2.1.9-1.gita65a472.el9_6.3
python3-iscsi-initiator-utils-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_6.3
0:6.2.1.9-1.gita65a472.el9_6.3
iscsi-initiator-utils
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_6.3
0:6.2.1.9-1.gita65a472.el9_6.3
iscsi-initiator-utils-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_6.3
0:6.2.1.9-1.gita65a472.el9_6.3
iscsi-initiator-utils-debugsource
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_6.3
0:6.2.1.9-1.gita65a472.el9_6.3
iscsi-initiator-utils-iscsiuio
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_6.3
0:6.2.1.9-1.gita65a472.el9_6.3
iscsi-initiator-utils-iscsiuio-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_6.3
0:6.2.1.9-1.gita65a472.el9_6.3
python3-iscsi-initiator-utils-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.9-1.gita65a472.el9_6.3
0:6.2.1.9-1.gita65a472.el9_6.3
iscsi-initiator-utils-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:6.2.1.9-22.gita65a472.el10_0.1
0:6.2.1.9-22.gita65a472.el10_0.1
iscsi-initiator-utils-debugsource
Red Hat:enterprise_linux_eus:10.0
 before 0:6.2.1.9-22.gita65a472.el10_0.1
0:6.2.1.9-22.gita65a472.el10_0.1
iscsi-initiator-utils-iscsiuio-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:6.2.1.9-22.gita65a472.el10_0.1
0:6.2.1.9-22.gita65a472.el10_0.1
python3-iscsi-initiator-utils
Red Hat:enterprise_linux_eus:10.0
 before 0:6.2.1.9-22.gita65a472.el10_0.1
0:6.2.1.9-22.gita65a472.el10_0.1
python3-iscsi-initiator-utils-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:6.2.1.9-22.gita65a472.el10_0.1
0:6.2.1.9-22.gita65a472.el10_0.1
iscsi-initiator-utils
Red Hat:enterprise_linux_eus:10.0
 before 0:6.2.1.9-22.gita65a472.el10_0.1
0:6.2.1.9-22.gita65a472.el10_0.1
iscsi-initiator-utils-iscsiuio
Red Hat:enterprise_linux_eus:10.0
 before 0:6.2.1.9-22.gita65a472.el10_0.1
0:6.2.1.9-22.gita65a472.el10_0.1
iscsi-initiator-utils-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.4-3.git2a8f9d8.el9_2.2
0:6.2.1.4-3.git2a8f9d8.el9_2.2
iscsi-initiator-utils-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.4-3.git2a8f9d8.el9_2.2
0:6.2.1.4-3.git2a8f9d8.el9_2.2
iscsi-initiator-utils-iscsiuio-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.4-3.git2a8f9d8.el9_2.2
0:6.2.1.4-3.git2a8f9d8.el9_2.2
python3-iscsi-initiator-utils
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.4-3.git2a8f9d8.el9_2.2
0:6.2.1.4-3.git2a8f9d8.el9_2.2
python3-iscsi-initiator-utils-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:6.2.1.4-3.git2a8f9d8.el9_2.2
0:6.2.1.4-3.git2a8f9d8.el9_2.2
iscsi-initiator-utils
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.4-3.git2a8f9d8.el9_2.2
0:6.2.1.4-3.git2a8f9d8.el9_2.2
iscsi-initiator-utils-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.4-3.git2a8f9d8.el9_2.2
0:6.2.1.4-3.git2a8f9d8.el9_2.2
iscsi-initiator-utils-debugsource
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.4-3.git2a8f9d8.el9_2.2
0:6.2.1.4-3.git2a8f9d8.el9_2.2
iscsi-initiator-utils-iscsiuio
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.4-3.git2a8f9d8.el9_2.2
0:6.2.1.4-3.git2a8f9d8.el9_2.2
iscsi-initiator-utils-iscsiuio-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.4-3.git2a8f9d8.el9_2.2
0:6.2.1.4-3.git2a8f9d8.el9_2.2
python3-iscsi-initiator-utils-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:6.2.1.4-3.git2a8f9d8.el9_2.2
0:6.2.1.4-3.git2a8f9d8.el9_2.2
iscsi-initiator-utils
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el9_8.2
0:6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:6.2.1.11-1.git4b3e853.el10_2.2
0:6.2.1.11-1.git4b3e853.el10_2.2
open-iscsi
SUSE:Linux Micro 6.2
From an advisory covering 2 CVEs
 before 2.1.12-160000.4.1
2.1.12-160000.4.1
open-iscsi
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 2.1.12-160000.4.1
2.1.12-160000.4.1
open-iscsi
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 2.1.12-160000.4.1
2.1.12-160000.4.1
open-iscsi
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 2.1.12-150700.57.6.1
2.1.12-150700.57.6.1
open-iscsi
Ubuntu:14.04:LTS
 All versions, plus listed versions
2.0.873-3ubuntu72.0.873-3ubuntu82.0.873-3ubuntu9
 None known
open-iscsi
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.0.873-3ubuntu132.0.873+git0.3b4b4500-13ubuntu32.0.873+git0.3b4b4500-14ubuntu12.0.873+git0.3b4b4500-14ubuntu32.0.873+git0.3b4b4500-14ubuntu3.1
Show 7 moreShow less
2.0.873+git0.3b4b4500-14ubuntu3.22.0.873+git0.3b4b4500-14ubuntu3.32.0.873+git0.3b4b4500-14ubuntu3.42.0.873+git0.3b4b4500-14ubuntu3.52.0.873+git0.3b4b4500-14ubuntu3.62.0.873+git0.3b4b4500-14ubuntu3.72.0.873+git0.3b4b4500-14ubuntu3.7+esm1
 None known
open-iscsi
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.0.874-4ubuntu32.0.874-4ubuntu42.0.874-4ubuntu52.0.874-5ubuntu12.0.874-5ubuntu2
Show 10 moreShow less
2.0.874-5ubuntu2.12.0.874-5ubuntu2.22.0.874-5ubuntu2.32.0.874-5ubuntu2.42.0.874-5ubuntu2.62.0.874-5ubuntu2.72.0.874-5ubuntu2.92.0.874-5ubuntu2.102.0.874-5ubuntu2.112.0.874-5ubuntu2.11+esm1
 None known
open-iscsi
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.0.874-7.1ubuntu32.0.874-7.1ubuntu52.0.874-7.1ubuntu62.0.874-7.1ubuntu6.12.0.874-7.1ubuntu6.22.0.874-7.1ubuntu6.32.0.874-7.1ubuntu6.42.0.874-7.1ubuntu6.5
 None known
open-iscsi
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.1.4-0ubuntu12.1.4-0ubuntu22.1.4-0ubuntu32.1.4-0ubuntu42.1.5-1ubuntu12.1.5-1ubuntu1.12.1.5-1ubuntu1.3
 None known
open-iscsi
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.1.8-1ubuntu22.1.9-3ubuntu12.1.9-3ubuntu22.1.9-3ubuntu32.1.9-3ubuntu4
Show 5 moreShow less
2.1.9-3ubuntu5.12.1.9-3ubuntu5.22.1.9-3ubuntu5.32.1.9-3ubuntu5.42.1.9-3ubuntu5.5
 None known
open-iscsi
Ubuntu:26.10
 All versions, plus listed versions
2.1.11-3ubuntu32.1.11-5ubuntu12.1.11-5ubuntu42.1.11-5ubuntu52.1.11-5ubuntu6
 None known
open-iscsi
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.1.11-1ubuntu32.1.11-3ubuntu12.1.11-3ubuntu22.1.11-3ubuntu32.1.11-3ubuntu3.1
 None known
open-iscsi
openSUSE:Tumbleweed
 before 2.1.12-112.1
2.1.12-112.1
open-iscsi
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 2.1.12-160000.4.1
2.1.12-160000.4.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-44943 is a medium vulnerability (CVSS 6.9) in Multiple Open Source Open-iscsi, published July 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 32nd percentile. Fixed in iscsi-initiator-utils 2.1.12-1.

References

Show 44 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open