CVE-2026-63887

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A heap overrun occurs in the iscsi encode text output() function when concatenating records into the rsp buf buffer. The function uses sprintf() to append key-value pairs without verifying the remaining capacity of the 8192-byte buffer. A single PDU containing up to 2048 minimal pairs can expand into a 32 KiB output, leading to a potential 24 KiB overflow in the kmalloc-8k slab. This issue is triggered when iscsi add notunderstood response() expands unknown keys into larger output records.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.