Search: CVE-2026-23216

A use-after-free vulnerability exists in the Linux kernel's iSCSI target code in the function iscsit_dec_conn_usage_count(). The issue occurs because the function calls complete() while holding a spinlock, which can lead to the connection structure being freed prematurely and subsequently accessed, causing a kernel memory corruption. This flaw has been fixed by changing the code to release the spinlock before calling complete().