An integer index supplied by an iSCSI target is passed to a library function without a lower bound check, allowing a negative value to pass the upper bound test. The library then uses the signed index to access an array before its first element, causing an out‑of‑bounds read of kernel memory. This flaw exposes the contents of memory that should remain hidden and could be leveraged to learn kernel‑level data or crash the system, as any read beyond the array bounds is unpredictable.

The issue affects the Linux kernel wherever the libiscsi implementation is compiled in. No specific kernel version is listed, but the patch was applied in a series of commits in the stable tree – any kernel before those revisions is vulnerable. The vulnerability deals with the generic Linux:Linux product line.

The CVSS score is not reported and the EPSS score is unavailable, so the precise severity cannot be quantified from the data, and the vulnerability is not listed in the CISA KEV catalog. Nevertheless, because the flaw can be triggered by malformed iSCSI PDUs sent from a remote host, it is a remote‑only attack vector with the possibility of information disclosure or denial of service. The lack of a lower bound check is a classic out‑of‑bounds read (CWE‑125), which historically has been considered serious in kernel contexts.