A vulnerability in the Linux kernel IB/isert subsystem can lead to a denial of service through a system crash when an initiator sends a SCSI command prematurely.

This is a race condition occurring within the isert_put_login_tx function. It allows an unauthenticated attacker to trigger a NULL pointer dereference because the final login response is sent before the session is fully registered, causing the kernel to panic when it attempts to process a command against an uninitialized session.

The primary impact of this vulnerability is a denial of service, as it causes a kernel panic and subsequent system crash. In environments relying on high availability and storage stability, such as those using iSCSI targets, this could lead to significant operational disruption and service downtime. While the CVSS score of 7.5 indicates high severity, the impact is strictly limited to service availability rather than data theft or unauthorized access.

Immediate Action: Update your Linux kernel to the corrected versions (5.10.270, 5.15.221, 6.1.188, or 6.6.157) or apply the equivalent patch provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages specifically related to the ib-comp-wq worker or target_submit errors.

Compensating Controls: Restrict access to the iSCSI target interfaces to trusted management networks to prevent unauthorized initiators from triggering the race condition.

Public Exploit Available: Unknown

Given that this vulnerability targets a core kernel subsystem, it poses a direct risk to system uptime. Administrators should prioritize patching the kernel across all affected iSCSI infrastructure to eliminate the possibility of a remotely triggered kernel panic. If immediate patching is not feasible, network-level segmentation is required to limit the exposure of the storage subsystem.