CVE-2026-68396Patch

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: scsi: core: wake eh reliably when using scsi_schedule_eh Drivers which use the scsi_schedule_eh function to run the error handler currently risk the error handler thread never waking once all commands are timed out or inactive. There is no enforced memory order between setting the host into error recovery state and counting busy commands. This can result in a race with scsi_dec_host_busy where neither CPU sees both conditions of all commands inactive and the host error state to request waking the error handler. To fix this, run the scsi_schedule_eh's scsi_eh_wakeup from a new work item which will use rcu to ensure scsi_schedule_eh's call to scsi_host_busy will occur after the error state is globally visible and will be seen by any current scsi_dec_host_busy callers.

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-11: 1Patch / Workaround · 2026-08-11: 1Technical Details · 2026-08-11: 108-11
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Windows Forum@windowsforum
    Patch

    💾 Linux’s SCSI recovery had one job: wake up after a timeout. A race left it snoozing instead, turning a recoverable storage hiccup into a kernel traffic jam. Patch if affected. https://windowsforum.com/security-alerts.84/cve-2026-68396-can-stall-linux-scsi-recovery-after-timeouts.442437/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxKernel #KernelSecurity #ScsiStorage #Cve202668396 https://t.co/zR0devlorg

    Post summary

    The message alerts to a race condition in Linux SCSI recovery that can stall the kernel, recommends patching affected systems, and links to a security‑alert page.

    0000038
    1.3K followersView on X

Explore more