Search: CVE-2026-23193

CVE-2026-23193 is a use-after-free vulnerability in the Linux kernel's iSCSI target code. The flaw occurs in the iscsit_dec_session_usage_count() function, where a complete() call is made while holding a session lock, potentially allowing the session structure to be freed prematurely. This race condition can lead to a kernel memory corruption detected by KASAN. The issue has been fixed by changing the lock release timing before the complete() call.