Issued at: 2026-08-12
Updated at: 2026-08-13
Advisory content derived from Red Hat RHSA-2026:53845, © Red Hat, Inc., used under CC BY 4.0, with modifications.
Synopsis
Important: iscsi-initiator-utils security, bug fix, and enhancement update
Description
The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.
Security Fix(es):
* open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)
* open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)
Bug Fix(es) and Enhancement(s):
* [FJ10.1 Bug]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [rhel-10.2.z] (JIRA:Rocky Linux-191899)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.