CVE-2024-26845

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The vulnerability is related to the scsi: target: core: Add TMF to tmr list handling in the Linux kernel. An abort that is responded to by iSCSI itself is added to tmr list but does not go to target core. A LUN RESET that goes through tmr list takes a refcounter on the abort and waits for completion. However, the abort will be never complete because it was not started in target core. This can cause a task to be blocked for more than 491 seconds. The issue is resolved by only adding abort to tmr list if it will be handled by target core.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.