CVE-2026-43055 is a high-severity vulnerability in the Linux kernel's SCSI target file subsystem. The issue arises because the aio_cmd->iocb structure is not properly initialized for the ki_write_stream field, which can lead to incorrect write failure status during asynchronous write commands. The flaw is fixed by using kzalloc_flex to allocate aio_cmd, ensuring ki_write_stream is zero-initialized.