The Linux kernel SCSI target subsystem contains a defect in the target_core_file module where the aio_cmd->iocb ki_write_stream field is not initialized during write operations. When fd_execute_rw_aio() processes a write command, the uninitialized ki_write_stream value may be interpreted as exceeding the maximum allowed streams, leading the kernel to return a failure status for the write. This flaw results in unintended write failures and can disrupt data integrity and service availability for processes that depend on the SCSI target interface.

All Linux kernel releases that include the target_core_file module before the commit that introduced kzalloc_flex allocation and explicit ki_write_stream initialization are potentially vulnerable. The affected versions include the mainline Linux kernel and the 7.0 release candidates (rc1 through rc5) listed in the supplied CPE strings.

The flaw is rated high severity with a CVSS score of 7.5, yet its EPSS score is below 1%, indicating that active exploitation is currently rare. A local or privileged user who can submit write requests through the SCSI target interface can trigger the bug, but remote code execution or privilege escalation is not supported by the description. The vulnerability is not listed in the CISA KEV catalog, so no public exploit evidence is currently known.