Boletines de Vulnerabilidades

CVE-2026-45997

   
Software afectado LINUX KERNEL
 
In the Linux kernel, the following vulnerability has been resolved:

scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails

If device_add(&sdkp->disk_dev) fails, put_device() runs
scsi_disk_release(), which frees the scsi_disk but leaves the gendisk
referenced. The device_add_disk() error path in sd_probe() calls
put_disk(gd); call put_disk(gd) here to mirror that cleanup.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-45997