Critical vulnerabilities
2 critical vulnerabilities in the Linux kernel
2 vulnerabilities rated critical (CVSS 9.0 or higher) found on 31 October 2026: Servers and applications.
- 2 critical
Linux kernel · Servers and applications
CVE-2026-99153
scsi: libiscsi: Validate the ITT reflected in a Reject PDU
- Severity
- Critical 9.8
- Published
- 28 Oct 2026
- Fixed in
- 6.12.115, 6.18.59, 7.2.13
| Software | Affected versions |
|---|---|
| Linux kernelServers and applications |
|
- CVE.org https://www.cve.org/CVERecord?id=CVE-2026-99153
Linux kernel · Servers and applications
CVE-2026-99154
scsi: libiscsi: Reject a negative task index from parse_pdu_itt
- Severity
- Critical 9.8
- Published
- 28 Oct 2026
- Fixed in
- 6.12.115, 6.18.59, 7.2.13
| Software | Affected versions |
|---|---|
| Linux kernelServers and applications |
|
- CVE.org https://www.cve.org/CVERecord?id=CVE-2026-99154
From NVD, the CVE Program, OSV.dev with the GitHub Advisory Database, WPVulnerability, WordPress's security advisories and CISA's Known Exploited Vulnerabilities catalog, as they stood when this was written. Each vulnerability's own page has its latest rating and fix. This product uses the NVD API but is not endorsed or certified by the NVD.