CVE Vulnerabilities

CVE-2026-55995

Double Free

Published: Jul 29, 2026 | Modified: Jul 30, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 IMPORTANT
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

Weakness

The product calls free() twice on the same memory address.

Affected Software

NameVendorStart VersionEnd Version
Red Hat Enterprise Linux 10RedHatisns-utils-0:0.103-1.el10_2.1*
Red Hat Enterprise Linux 8RedHatisns-utils-0:0.99-1.el8_10.1*
Red Hat Enterprise Linux 9RedHatisns-utils-0:0.101-4.el9_8.1*

Potential Mitigations

References