Red Hat Product Errata RHSA-2026:60427 - Security Advisory Issued: 2026-08-26 Updated: 2026-08-26 RHSA-2026:60427 - Security Advisory Overview Updated Packages Synopsis Important: iscsi-initiator-utils security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks. Security Fix(es): open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944) open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2508412 - CVE-2026-44944 open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket BZ - 2508419 - CVE-2026-44943 open-iscsi: open-iscsi: Privilege Escalation via Path Traversal CVEs CVE-2026-44943 CVE-2026-44944 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.src.rpm SHA-256: b3a416e19f07e96ba7451f94678c2d7059226810b04228a7763dc60a2dedec5c x86_64 iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.i686.rpm SHA-256: 47141a1ac974f9ea6718924bce86158a43b86a9c4bdbd357ba8766fadd5525cc iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: bf237fdef572476c75917c44452caeb8e0c0aa97834d6cbed91c4a69db72f7e2 iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.i686.rpm SHA-256: 5550e0f06b5db9606bfbb37f6c86a816d55e42b318850fe6e707f3f0fe31204a iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: ff9f74d47fca6d878c38a9ca070a0b24e350a7bbc12cc189dadd058e9386607a iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: ff9f74d47fca6d878c38a9ca070a0b24e350a7bbc12cc189dadd058e9386607a iscsi-initiator-utils-debugsource-6.2.1.9-1.gita65a472.el9_4.2.i686.rpm SHA-256: b893e9914da6c392f6fd10fa36bbf3d6e55b9a065b0be373a3b89a58378df9ee iscsi-initiator-utils-debugsource-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: 66ce7c83a1643b1dbe21f4486378f087b7f1dd77286b88e4c236e3fa205e22d0 iscsi-initiator-utils-debugsource-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: 66ce7c83a1643b1dbe21f4486378f087b7f1dd77286b88e4c236e3fa205e22d0 iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: 63ce9a3e980ccc3b2424601f9ec0da21d3f1cc5fa337277709f1d60be2c65d5a iscsi-initiator-utils-iscsiuio-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.i686.rpm SHA-256: 11f08b36f346a47646e72194752eaabff9f0650df4cc6816f44dc19336657eed iscsi-initiator-utils-iscsiuio-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: a838fe86c3b912149dd78f1c30ec09a06a09774d001782ed0c8297dc6c146024 iscsi-initiator-utils-iscsiuio-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: a838fe86c3b912149dd78f1c30ec09a06a09774d001782ed0c8297dc6c146024 python3-iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: cbb55bcc713998dff3dc0f6d9917e38c4550681a01ec9f3e271057188c929cc6 python3-iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.i686.rpm SHA-256: a525db06d82eb2564c6884106583fbd5947b3dc4b203e0e93cd61478598ee062 python3-iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: f6fd7db6561efe69bfe4735e860877ca0f1536786c94ae66bdd4f140aeb360eb python3-iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: f6fd7db6561efe69bfe4735e860877ca0f1536786c94ae66bdd4f140aeb360eb Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.src.rpm SHA-256: b3a416e19f07e96ba7451f94678c2d7059226810b04228a7763dc60a2dedec5c ppc64le iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.ppc64le.rpm SHA-256: 69c9231a1539bb040888d815feee1c957d108f86be5416be110dd9afcc3abd3a iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.ppc64le.rpm SHA-256: 066afc51222d90e110b685c99a3fb4feac6541b1402640412b2bcff77777c294 iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.ppc64le.rpm SHA-256: 066afc51222d90e110b685c99a3fb4feac6541b1402640412b2bcff77777c294 iscsi-initiator-utils-debugsource-6.2.1.9-1.gita65a472.el9_4.2.ppc64le.rpm SHA-256: fcb288bdff0b31ae7615ecd059b80ff16aca97ceaae4b858774eb7ea14a45f57 iscsi-initiator-utils-debugsource-6.2.1.9-1.gita65a472.el9_4.2.ppc64le.rpm SHA-256: fcb288bdff0b31ae7615ecd059b80ff16aca97ceaae4b858774eb7ea14a45f57 iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9_4.2.ppc64le.rpm SHA-256: 3f6b3aeee5256ccd7e97363158591c64e32bf52d64cf9baaf9d6bf4dc7dd6c08 iscsi-initiator-utils-iscsiuio-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.ppc64le.rpm SHA-256: de4b825a66dad89fb6ba4b0549c38d1e2ac5c2ed2ca33eb051c378daf246967d iscsi-initiator-utils-iscsiuio-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.ppc64le.rpm SHA-256: de4b825a66dad89fb6ba4b0549c38d1e2ac5c2ed2ca33eb051c378daf246967d python3-iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.ppc64le.rpm SHA-256: 451c97eb89bc6d7845006f7cf324e0a4d7bf052feae9108e31ffc6ae62597266 python3-iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.ppc64le.rpm SHA-256: 73679030f9f8fdc496d6d3070c1169774cd9b693d43cf77284599bdd7d2ea0df python3-iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.ppc64le.rpm SHA-256: 73679030f9f8fdc496d6d3070c1169774cd9b693d43cf77284599bdd7d2ea0df Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.src.rpm SHA-256: b3a416e19f07e96ba7451f94678c2d7059226810b04228a7763dc60a2dedec5c x86_64 iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.i686.rpm SHA-256: 47141a1ac974f9ea6718924bce86158a43b86a9c4bdbd357ba8766fadd5525cc iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: bf237fdef572476c75917c44452caeb8e0c0aa97834d6cbed91c4a69db72f7e2 iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.i686.rpm SHA-256: 5550e0f06b5db9606bfbb37f6c86a816d55e42b318850fe6e707f3f0fe31204a iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: ff9f74d47fca6d878c38a9ca070a0b24e350a7bbc12cc189dadd058e9386607a iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: ff9f74d47fca6d878c38a9ca070a0b24e350a7bbc12cc189dadd058e9386607a iscsi-initiator-utils-debugsource-6.2.1.9-1.gita65a472.el9_4.2.i686.rpm SHA-256: b893e9914da6c392f6fd10fa36bbf3d6e55b9a065b0be373a3b89a58378df9ee iscsi-initiator-utils-debugsource-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: 66ce7c83a1643b1dbe21f4486378f087b7f1dd77286b88e4c236e3fa205e22d0 iscsi-initiator-utils-debugsource-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: 66ce7c83a1643b1dbe21f4486378f087b7f1dd77286b88e4c236e3fa205e22d0 iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: 63ce9a3e980ccc3b2424601f9ec0da21d3f1cc5fa337277709f1d60be2c65d5a iscsi-initiator-utils-iscsiuio-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.i686.rpm SHA-256: 11f08b36f346a47646e72194752eaabff9f0650df4cc6816f44dc19336657eed iscsi-initiator-utils-iscsiuio-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: a838fe86c3b912149dd78f1c30ec09a06a09774d001782ed0c8297dc6c146024 iscsi-initiator-utils-iscsiuio-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: a838fe86c3b912149dd78f1c30ec09a06a09774d001782ed0c8297dc6c146024 python3-iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: cbb55bcc713998dff3dc0f6d9917e38c4550681a01ec9f3e271057188c929cc6 python3-iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.i686.rpm SHA-256: a525db06d82eb2564c6884106583fbd5947b3dc4b203e0e93cd61478598ee062 python3-iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: f6fd7db6561efe69bfe4735e860877ca0f1536786c94ae66bdd4f140aeb360eb python3-iscsi-initiator-utils-debuginfo-6.2.1.9-1.gita65a472.el9_4.2.x86_64.rpm SHA-256: f6fd7db6561efe69bfe4735e860877ca0f1536786c94ae66bdd4f140aeb360eb Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.src.rpm SHA-256: b3a416e19f07e96ba7451f94678c2d7059226810b04228a7763dc60a2dedec5c aarch64 iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_4.2.aarch64.rpm SHA-
This Important security update for iscsi-initiator-utils addresses two vulnerabilities: an authentication bypass in the iscsiuio control socket (CVE-2026-44944) and a privilege escalation via path traversal (CVE-2026-44943). The advisory applies to Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions and related Extended Life Cycle support streams. Red Hat has released updated packages to remediate these issues; administrators should apply the update referenced in RHSA-2026:60427.