Search: CVE-2026-90011

A vulnerability in the Linux kernel's iSCSI target login handling allows an unauthenticated initiator to cause a buffer to be processed without a proper null terminator, leading to out-of-bounds reads. This occurs because the login payload buffer is allocated with exactly the maximum allowed size, leaving no space for a terminator byte. The issue affects certain Linux kernel versions and has been resolved by allocating an extra byte for the terminator.