CVE-2026-45997: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails
In the Linux kernel, the following vulnerability has been resolved:
scsi: sd: fix missing putdisk() when deviceadd(&diskdev) fails
If deviceadd(&sdkp->diskdev) fails, putdevice() runs scsidiskrelease(), which frees the scsidisk but leaves the gendisk referenced. The deviceadddisk() error path in sdprobe() calls putdisk(gd); call putdisk(gd) here to mirror that cleanup.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
What level of access is required to exploit this issue?
The vulnerability is rated as locally exploitable and requires low privileges. It does not require user interaction.
What is the expected security impact?
The reported impact is on availability, rated high. No confidentiality or integrity impact is indicated.
Under what condition does the affected cleanup path execute?
The affected path is reached when device_add() for the SCSI disk device fails during sd_probe(). In that case, the gendisk reference was not released.