CVE-2026-45997

Published: May 27, 2026Modified: Oct 15, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails If device_add(&sdkp->disk_dev) fails, put_device() runs scsi_disk_release(), which frees the scsi_disk but leaves the gendisk referenced. The device_add_disk() error path in sd_probe() calls put_disk(gd); call put_disk(gd) here to mirror that cleanup.

Affected (18)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	4.14.250 ≤ version < 4.15
Linux Linux Kernel	4.19.210 ≤ version < 4.20
Linux Linux Kernel	4.4.288 ≤ version < 4.5
Linux Linux Kernel	4.9.286 ≤ version < 4.10
Linux Linux Kernel	5.10.72 ≤ version < 5.11
Linux Linux Kernel	5.14.11 ≤ version < 5.15
Linux Linux Kernel	5.15.1 ≤ version < 6.1.175
Linux Linux Kernel	5.4.152 ≤ version < 5.5
Linux Linux Kernel	6.13 ≤ version < 6.18.27
Linux Linux Kernel	6.19 ≤ version < 7.0.4
Linux Linux Kernel	6.2 ≤ version < 6.6.140
Linux Linux Kernel	6.7 ≤ version < 6.12.86
Linux Linux Kernel	Version 5.15
Linux Linux Kernel	Version 5.15 rc3
Linux Linux Kernel	Version 5.15 rc4
Linux Linux Kernel	Version 5.15 rc5
Linux Linux Kernel	Version 5.15 rc6
Linux Linux Kernel	Version 5.15 rc7