CVE-2026-68396
In the Linux kernel, the following vulnerability has been resolved:
scsi: core: wake eh reliably when using scsi_schedule_eh
Drivers which use the scsi_schedule_eh function to run the error handler
currently risk the error handler thread never waking once all commands are
timed out or inactive. There is no enforced memory order between setting
the host into error recovery state and counting busy commands. This can
result in a race with scsi_dec_host_busy where neither CPU sees both
conditions of all commands inactive and the host error state to request
waking the error handler.
To fix this, run the scsi_schedule_eh's scsi_eh_wakeup from a new work item
which will use rcu to ensure scsi_schedule_eh's call to scsi_host_busy will
occur after the error state is globally visible and will be seen by any
current scsi_dec_host_busy callers.
CSIRTS triage
- What
- SCSI core eh wakeup mechanism is unreliable when using scsi_schedule_eh, leading to stalled error handling.
- Who is affected
- Systems running affected Linux kernel versions with SCSI devices.
- Urgency
- Medium severity (CVSS 5.5) DoS via error handler stall; kernel update needed to ensure reliable error handling.
- Action
- Update to a patched Linux kernel version that reliably wakes the error handler in scsi_schedule_eh.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-68396
Get an email if CVE-2026-68396 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.20% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 10% of all EPSS-scored CVEs.
Advisory coverage (2)
- mediumCVE-2026-68396: scsi: core: wake eh reliably when using scsi_schedule_ehmsrc · 2026-08-11
- unknownCVE-2026-68396: In the Linux kernel, the following vulnerability has been resolved: scsi: core: wake eh reliab…nvd · 2026-08-10
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-68396)