https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T14:33:00.470200+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-90268 CVE-2026-90268 — scsi: sd: Fix error handling in sd_probe() after large pool creation failure 2026-09-30T14:33:00.483613+00:00

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

scsi: sd: Fix error handling in sd_probe() after large pool creation failure

After device_add(&sdkp->disk_dev) succeeds, sd_large_pool_create() failure must unregister disk_dev and let scsi_disk_release() free sdkp. Going through out_free_index kfree()s an already registered device and leaks the sysfs entry.