CVE-2026-68396

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the SCSI core when drivers use the scsi schedule eh() function to run the error handler. Due to a lack of enforced memory order between setting the host into error recovery state and counting busy commands, the error handler thread may fail to wake up once all commands are inactive or timed out. This occurs because of a race with the scsi dec host busy() function, where the system may fail to recognize both the inactive command state and the host error state simultaneously.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.