CVE-2026-68396
Received Received - Intake

Race Condition in Linux Kernel SCSI Core

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: scsi: core: wake eh reliably when using scsi_schedule_eh Drivers which use the scsi_schedule_eh function to run the error handler currently risk the error handler thread never waking once all commands are timed out or inactive. There is no enforced memory order between setting the host into error recovery state and counting busy commands. This can result in a race with scsi_dec_host_busy where neither CPU sees both conditions of all commands inactive and the host error state to request waking the error handler. To fix this, run the scsi_schedule_eh's scsi_eh_wakeup from a new work item which will use rcu to ensure scsi_schedule_eh's call to scsi_host_busy will occur after the error state is globally visible and will be seen by any current scsi_dec_host_busy callers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68396
EUVD
EUVD-2026-55582

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition in the SCSI error handling mechanism. When drivers use scsi_schedule_eh to run the error handler, the error handler thread may fail to wake up properly after all commands time out or become inactive. This happens due to a lack of memory order enforcement between setting the host into error recovery state and counting busy commands, potentially causing the error handler to remain dormant.

Impact Analysis

This vulnerability could lead to delayed or failed error recovery in SCSI devices, causing system instability or data corruption. If the error handler does not wake up, commands may remain stuck, affecting storage operations and potentially leading to system hangs or crashes.

Mitigation Strategies

Apply the Linux kernel patch that resolves the scsi_schedule_eh issue to ensure proper error handler wake-up mechanisms.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68396. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart