A critical use-after-free vulnerability exists in the Linux kernel iSCSI target implementation that could allow an unauthenticated attacker to compromise system integrity or cause a denial of service.

This is a use-after-free vulnerability in the core iSCSI target subsystem, specifically within the register and move function. An unauthenticated attacker can trigger this flaw by sending a specially crafted PERSISTENT RESERVE OUT parameter list exceeding one page in length, which causes the kernel to access memory after it has been unmapped.

Successful exploitation of this vulnerability can lead to memory corruption, which may result in arbitrary code execution or a complete system crash. Given the CVSS score of 9.8, this flaw represents a critical risk to business continuity and data security. If exploited, an attacker could gain unauthorized control over affected storage targets, leading to significant data breaches or extended system downtime.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics or repeated crashes associated with the iSCSI subsystem, which may indicate attempted exploitation.

Compensating Controls: Restrict network access to iSCSI target interfaces to trusted management subnets only, effectively limiting the attack surface for unauthenticated remote actors.

Public Exploit Available: Unknown

This vulnerability presents a severe risk due to its potential for remote exploitation without prior authentication. Security teams must prioritize patching the Linux kernel across all production environments that utilize iSCSI target services. Testing and deploying the provided kernel updates should be conducted immediately to minimize exposure to this critical memory corruption flaw.