Skip to content
OpenAdvisories
High · 8.5 CVE-2026-44944 EUVD-2026-50312GHSA-jm64-8832-wmmq

iscsiuio control-socket authentication bypass in open-iscsi

Published Jul 29, 2026 · Updated Jul 29, 2026 · Assigned by suse

Vendor: open-iscsi Product: open-iscsi Package: iscsi-initiator-utils Package: open-iscsi Package: open-iscsi Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.

This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Affected products

VendorProductAffectedFixed
open-iscsi open-iscsi — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 open-iscsi 2.1.12-1 —
Debian 13 open-iscsi No fix yet —
Debian 12 open-iscsi 2.1.8-1+deb12u1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 open-iscsi No fix yet —
Ubuntu 26.04 LTS open-iscsi No fix yet —
Ubuntu 24.04 LTS open-iscsi No fix yet —
Ubuntu 22.04 LTS open-iscsi No fix yet —
Ubuntu 20.04 LTS open-iscsi No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS open-iscsi No fix yet —
Ubuntu Pro 18.04 LTS open-iscsi No fix yet —
Ubuntu Pro 16.04 LTS open-iscsi No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 iscsi-initiator-utils +2 6.2.1.11-1.git4b3e853.el10_2.2 RHSA-2026:53845
RHEL 9 iscsi-initiator-utils +2 6.2.1.11-1.git4b3e853.el9_8.2 RHSA-2026:53844
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.6 EUS iscsi-initiator-utils +2 6.2.1.9-1.gita65a472.el9_6.3 RHSA-2026:60428
RHEL 9.4 E4S iscsi-initiator-utils +2 6.2.1.9-1.gita65a472.el9_4.2 RHSA-2026:60427
RHEL 9.2 E4S iscsi-initiator-utils +2 6.2.1.4-3.git2a8f9d8.el9_2.2 RHSA-2026:62029

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 iscsi-initiator-utils +2 6.2.1.11-1.git4b3e853.el10_2.2 ALSA-2026:53845
AlmaLinux 9 iscsi-initiator-utils +2 6.2.1.11-1.git4b3e853.el9_8.2 ALSA-2026:53844

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 iscsi-initiator-utils 6.2.1.11-1.git4b3e853.el10_2.2 RLSA-2026:53845
Rocky Linux 9 iscsi-initiator-utils 6.2.1.11-1.git4b3e853.el9_8.2 RLSA-2026:53844

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 open-iscsi 2.1.12-150700.57.6.1 SUSE-SU-2026:3647-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 open-iscsi 2.1.12-160000.4.1 SUSE-SU-2026:23235-1, SUSE-SU-2026:23223-1
SLES 16.0 open-iscsi 2.1.12-160000.4.1 SUSE-SU-2026:23235-1, SUSE-SU-2026:23223-1
SLE Micro 6.2 open-iscsi 2.1.12-160000.4.1 SUSE-SU-2026:23157-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 16.0 open-iscsi 2.1.12-160000.4.1 openSUSE-SU-2026:21580-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 iscsi-initiator-utils +3 6.2.1.4-10.git2a8f9d8.amzn2023.0.3 ALAS2023-2026-2066
Amazon Linux 2 iscsi-initiator-utils +2 6.2.0.874-7.amzn2.0.1 ALAS2-2026-3867

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 iscsi-initiator-utils 2.1.12-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 iscsi-initiator-utils +2 6.2.1.11-1.git4b3e853.0.1.el10_2.2 ELSA-2026-53845
Oracle Linux 9 iscsi-initiator-utils +2 6.2.1.11-1.git4b3e853.0.1.el9_8.2 ELSA-2026-53844

Advisories 19

References