High USN-8807-1 1 CVE

Open-iSNS vulnerability

Published Sep 23, 2026 · Updated Sep 24, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Open-iSNS contained a double-free vulnerability when
decoding malformed iSNS attributes. An unauthenticated attacker could possibly
use this to cause a denial of service.

Fixed packages 5

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	open-isns	0.101-0ubuntu2.1
Ubuntu · 24.04 LTS 24.04:LTS	open-isns	0.101-0.3ubuntu0.1
Ubuntu · 26.04 LTS 26.04:LTS	open-isns	0.101-2.1ubuntu0.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	open-isns	0.97-2ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS	open-isns	0.97-3ubuntu0.1~esm1

Vulnerabilities 1

High 8.7

CVE-2026-55995

Double-free in the iSNS attribute decoder in open-iscsi

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

open-iscsi open-iscsi open-iscsi open-isns Debian Ubuntu Azure Linux

Jul 29, 2026

References

report
https://ubuntu.com/security/CVE-2026-55995