Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-90268

scsi: sd: Fix error handling in sd_probe() after large pool creation failure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix error handling in sd_probe() after large pool creation failure After device_add(&sdkp->disk_dev) succeeds, sd_large_pool_create() failure must unregister disk_dev and let scsi_disk_release() free sdkp. Going through out_free_index kfree()s an already registered device and leaks the sysfs entry.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7179e626b76eb42f2529c6f6dd6ba88ea2445372 to < 748a14a0d41cfe3017251c11b314f85045414942affected
  • 7179e626b76eb42f2529c6f6dd6ba88ea2445372 to < e3cc6ea1a745e7f5d326f919a428b244fa119d8faffected

Linux Linux

Default version status: affected

  • 7.1affected
  • 0 to < 7.1unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References