{"id":"ALSA-2026:53845","summary":"Important: iscsi-initiator-utils security, bug fix, and enhancement update","details":"The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.  \n\nSecurity Fix(es):  \n\n  * open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)\n  * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [FJ10.1 Bug]: iscsiadm reports node.discovery_type as \"fw\", although it should be \"static\". [almalinux-10.2.z] (JIRA:AlmaLinux-191899)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-08-12T12:27:03.007783934Z","published":"2026-08-11T00:00:00Z","related":["CVE-2026-44943","CVE-2026-44944"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:53845"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-44943"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-44944"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2508412"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2508419"},{"type":"ADVISORY","url":"https://errata.almalinux.org/10/ALSA-2026-53845.html"}],"affected":[{"package":{"name":"iscsi-initiator-utils","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/iscsi-initiator-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1.11-1.git4b3e853.el10_2.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:53845.json"}},{"package":{"name":"iscsi-initiator-utils-iscsiuio","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/iscsi-initiator-utils-iscsiuio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1.11-1.git4b3e853.el10_2.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:53845.json"}},{"package":{"name":"python3-iscsi-initiator-utils","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/python3-iscsi-initiator-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1.11-1.git4b3e853.el10_2.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:53845.json"}}],"schema_version":"1.9.0"}