cve 2026 55995

CVE-2026-55995 is a denial-of-service flaw in the iSNS attribute decoder used by open-isns, the library and tooling commonly paired with Open-iSCSI on Linux, not a vulnerability in Microsoft's Windows iSCSI Initiator. The upstream fix is already in the open-iscsi project's open-isns repository, but it has not been followed by a new tagged open-isns release, leaving distribution package maintainers and administrators to determine whether their installed build contains the two-line repair. Microsoft's Security Update Guide has an entry for CVE-2026-55995 describing a double-free in an iSNS attribute decoder and labels it as affecting open-iscsi. The primary upstream record is more precise about the affected component.