Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94431.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-94431
Upstream
Published
2026-07-29T13:18:46Z
Modified
2026-08-28T17:47:40.765197601Z
Summary
CVE-2026-44944 affecting package iscsi-initiator-utils for versions less than 2.1.12-1
Details

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.

This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

References

Affected packages

Azure Linux:3 / iscsi-initiator-utils

Package

Name
iscsi-initiator-utils
Purl
pkg:rpm/azure-linux/iscsi-initiator-utils

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.1.12-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94431.json"