Most recent entries from all

ALSA-2026:53844 — Important: iscsi-initiator-utils security, bug fix, and enhancement update

2026-09-29T07:44:01.053040+00:00

Affected: AlmaLinux:9: iscsi-initiator-utils, AlmaLinux:9: iscsi-initiator-utils-iscsiuio, AlmaLinux:9: python3-iscsi-initiator-utils

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.

Security Fix(es):

* open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944) * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)

Bug Fix(es) and Enhancement(s):

* [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [almalinux-9.8.z] (JIRA:AlmaLinux-191897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

fkie_cve-2026-44944

2026-09-29T07:44:01.053115+00:00

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.

This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

GHSA-jm64-8832-wmmq

2026-09-29T07:44:01.053147+00:00

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.

This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

msrc_CVE-2026-44944 — iscsiuio control-socket authentication bypass in open-iscsi

2026-09-29T07:44:01.053191+00:00

msrc_CVE-2026-44944

OESA-2026-3339 — open-iscsi security update

2026-09-29T07:44:01.053208+00:00

Affected: openEuler:20.03-LTS-SP4: open-iscsi

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI. Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.

This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44944)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

openSUSE-SU-2026:21580-1 — Security update for open-iscsi

2026-09-29T07:44:01.053239+00:00

Security update for open-iscsi

RHSA-2026:60427 — Red Hat Security Advisory: iscsi-initiator-utils security update

2026-09-29T07:44:01.053255+00:00

open-iscsi: open-iscsi: Privilege Escalation via Path Traversal open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

SUSE-SU-2026:23157-1 — Security update for open-iscsi

2026-09-29T07:44:01.053272+00:00

Security update for open-iscsi

UBUNTU-CVE-2026-44944

2026-09-29T07:44:01.053285+00:00

Affected: Ubuntu:14.04:LTS: open-iscsi, Ubuntu:Pro:16.04:LTS: open-iscsi, Ubuntu:Pro:18.04:LTS: open-iscsi, Ubuntu:20.04:LTS: open-iscsi, Ubuntu:22.04:LTS: open-iscsi, Ubuntu:24.04:LTS: open-iscsi, Ubuntu:26.04:LTS: open-iscsi

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.