CVE-2026-93782

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vhost-scsi component where guest response descriptors are translated into userspace iovecs during command submission. Because target-core completes these commands asynchronously, the VHOST SET MEM TABLE operation can replace the memory table while an in-flight command still uses response iovecs translated via the previous table. If the old mapping is reused after VHOST SET MEM TABLE returns, command completion may write the response to an unrelated userspace object. This occurs during the handling of a device ioctl within the vhost dev ioctl() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.