Skip to content
OpenAdvisories
High · 8.7 CVE-2026-55995 EUVD-2026-50330GHSA-93fw-mwmg-2g5m

Double-free in the iSNS attribute decoder in open-iscsi

Published Jul 29, 2026 · Updated Jul 29, 2026 · Assigned by suse

Vendor: open-iscsi Product: open-iscsi Package: isns-utils Package: open-iscsi Package: open-isns Package: open-isns Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

Affected products

VendorProductAffectedFixed
open-iscsi open-iscsi — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 open-isns 0.103-2 —
Debian 13 open-isns No fix yet —
Debian 12 open-isns No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 open-iscsi No fix yet —
Ubuntu 26.04 LTS open-iscsi No fix yet —
Ubuntu 26.04 LTS open-isns 0.101-2.1ubuntu0.1 USN-8807-1
Ubuntu 24.04 LTS open-iscsi No fix yet —
Ubuntu 24.04 LTS open-isns 0.101-0.3ubuntu0.1 USN-8807-1
Ubuntu 22.04 LTS open-iscsi No fix yet —
Ubuntu 22.04 LTS open-isns 0.101-0ubuntu2.1 USN-8807-1
Ubuntu 20.04 LTS open-iscsi No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS open-iscsi No fix yet —
Ubuntu Pro 20.04 LTS open-isns 0.97-3ubuntu0.1~esm1 USN-8807-1
Ubuntu Pro 18.04 LTS open-iscsi No fix yet —
Ubuntu Pro 18.04 LTS open-isns 0.97-2ubuntu0.1~esm1 USN-8807-1
Ubuntu Pro 16.04 LTS open-iscsi No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 isns-utils +1 0.103-1.el10_2.1 RHSA-2026:53846
RHEL 9 isns-utils +1 0.101-4.el9_8.1 RHSA-2026:53847
RHEL 8 isns-utils +2 0.99-1.el8_10.1 RHSA-2026:53848
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS isns-utils +1 0.103-1.el10_0.1 RHSA-2026:60005
RHEL 9.6 EUS isns-utils +1 0.101-4.el9_6.1 RHSA-2026:60006
RHEL 9.4 E4S isns-utils +1 0.101-4.el9_4.1 RHSA-2026:59996
RHEL 9.2 E4S isns-utils +1 0.101-4.el9_2.1 RHSA-2026:59999
RHEL 8.8 TUS isns-utils +2 0.99-1.el8_8.1 RHSA-2026:60333
RHEL 8.8 E4S isns-utils +2 0.99-1.el8_8.1 RHSA-2026:60333
RHEL 8.6 EUS Long Life isns-utils +2 0.99-1.el8_6.1 RHSA-2026:60385
RHEL 8.6 AUS isns-utils +2 0.99-1.el8_6.1 RHSA-2026:60385
RHEL 8.4 EUS Long Life isns-utils +2 0.99-1.el8_4.1 RHSA-2026:61249
RHEL 8.4 AUS isns-utils +2 0.99-1.el8_4.1 RHSA-2026:61249

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 isns-utils +1 0.103-1.el10_2.1 ALSA-2026:53846
AlmaLinux 9 isns-utils +1 0.101-4.el9_8.1 ALSA-2026:53847
AlmaLinux 8 isns-utils +2 0.99-1.el8_10.1 ALSA-2026:53848

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 isns-utils 0.103-1.el10_2.1 RLSA-2026:53846
Rocky Linux 9 isns-utils 0.101-4.el9_8.1 RLSA-2026:53847
Rocky Linux 8 isns-utils 0.99-1.el8_10.1 RLSA-2026:53848

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed open-isns 0.103+4.60de8b5-1.1 openSUSE-SU-2026:11456-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 isns-utils +2 0.101-6.amzn2023.0.1 ALAS2023-2026-2054
Amazon Linux 2 iscsi-initiator-utils +2 6.2.0.874-7.amzn2.0.1 ALAS2-2026-3867
Amazon Linux 2 isns-utils 0.93-7.amzn2.0.3 ALAS2-2026-3859

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 isns-utils 0.102-2 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 isns-utils +1 0.103-1.el10_2.1 ELSA-2026-53846
Oracle Linux 9 isns-utils +1 0.101-4.el9_8.1 ELSA-2026-53847
Oracle Linux 8 isns-utils +2 0.99-1.el8_10.1 ELSA-2026-53848

Advisories 26

References