Search: CVE-2026-53176

A critical vulnerability (CVE-2026-53176) in the Linux kernel's InfiniBand iSER driver allows a remote attacker to cause a denial of service by sending malformed login PDUs shorter than the expected header length. This triggers an integer underflow and a large out-of-bounds memory copy, crashing the target system. The flaw can be exploited without authentication during the login phase, preceding iSCSI authentication. Multiple Linux kernel versions are affected. A patch is available and included in recent Linux kernel updates.