CVE-2026-45997

Published: May 27, 2026Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails If device_add(&sdkp->disk_dev) fails, put_device() runs scsi_disk_release(), which frees the scsi_disk but leaves the gendisk referenced. The device_add_disk() error path in sd_probe() calls put_disk(gd); call put_disk(gd) here to mirror that cleanup.

Affected (18)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.14.250 to 4.15
Linux Linux Kernel	From 4.19.210 to 4.20
Linux Linux Kernel	From 4.4.288 to 4.5
Linux Linux Kernel	From 4.9.286 to 4.10
Linux Linux Kernel	From 5.10.72 to 5.11
Linux Linux Kernel	From 5.14.11 to 5.15
Linux Linux Kernel	From 5.15.1 to 6.1.175
Linux Linux Kernel	From 5.4.152 to 5.5
Linux Linux Kernel	From 6.13 to 6.18.27
Linux Linux Kernel	From 6.19 to 7.0.4
Linux Linux Kernel	From 6.2 to 6.6.140
Linux Linux Kernel	From 6.7 to 6.12.86
Linux Linux Kernel	Version 5.15
Linux Linux Kernel	Version 5.15 rc3
Linux Linux Kernel	Version 5.15 rc4
Linux Linux Kernel	Version 5.15 rc5
Linux Linux Kernel	Version 5.15 rc6
Linux Linux Kernel	Version 5.15 rc7