scsi storage

CVE-2026-68396 fixes a Linux kernel race that can leave a SCSI host’s error-handling thread asleep after I/O has already timed out or gone inactive, turning a recoverable storage failure into a stalled recovery path. The National Vulnerability Database added the record on August 10, 2026, using...

CVE-2026-45997 is a Linux kernel storage-driver vulnerability published by NVD on May 27, 2026, after kernel.org assigned a CVE to a fixed SCSI disk error path that failed to release a gendisk reference when device registration failed. The bug is not the kind of headline-grabbing...