CVE-2026-45997

MEDIUM EPSS 2.4%
Published May 27, 20261mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 27, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails If device_add(&sdkp->disk_dev) fails, put_device() runs scsi_disk_release(), which frees the scsi_disk but leaves the gendisk referenced. The device_add_disk() error path in sd_probe() calls put_disk(gd); call put_disk(gd) here to mirror that cleanup.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 18

VendorProductVersionRange
linuxlinux_kernel*≥4.4.288  –  <4.5
linuxlinux_kernel*≥4.9.286  –  <4.10
linuxlinux_kernel*≥4.14.250  –  <4.15
linuxlinux_kernel*≥4.19.210  –  <4.20
linuxlinux_kernel*≥5.4.152  –  <5.5
linuxlinux_kernel*≥5.10.72  –  <5.11
linuxlinux_kernel*≥5.14.11  –  <5.15
linuxlinux_kernel*≥5.15.1  –  <6.1.175
linuxlinux_kernel*≥6.2  –  <6.6.140
linuxlinux_kernel*≥6.7  –  <6.12.86
linuxlinux_kernel*≥6.13  –  <6.18.27
linuxlinux_kernel*≥6.19  –  <7.0.4
linuxlinux_kernel5.15any
linuxlinux_kernel5.15any
linuxlinux_kernel5.15any
linuxlinux_kernel5.15any
linuxlinux_kernel5.15any
linuxlinux_kernel5.15any

References 6

  • git.kernel.org https://git.kernel.org/stable/c/13e550fbfccdb311e76ec96892dfe35f0dba0657
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1e111c4b3a726df1254670a5cc4868cedb946d37
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/262152ec37101f9dc524743ccdbd6c7641d14573
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2c2c14b7dfccad8c5a28802849e40c21252e4c28
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a95d38c5701431bfc826e7b18acc0785919d5c88
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b64b4f499801b12d0e2785447e4df6c164c608a9
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/13e550fbfccdb311e76ec96892dfe35f0dba0657
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1e111c4b3a726df1254670a5cc4868cedb946d37
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/262152ec37101f9dc524743ccdbd6c7641d14573
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2c2c14b7dfccad8c5a28802849e40c21252e4c28
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a95d38c5701431bfc826e7b18acc0785919d5c88
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b64b4f499801b12d0e2785447e4df6c164c608a9
    Patch