Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2gpx-r754-7j65

Опубликовано: 17 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

In the Linux kernel, the following vulnerability has been resolved:

scsi: sd: Fix error handling in sd_probe() after large pool creation failure

After device_add(&sdkp->disk_dev) succeeds, sd_large_pool_create() failure must unregister disk_dev and let scsi_disk_release() free sdkp. Going through out_free_index kfree()s an already registered device and leaks the sysfs entry.

In the Linux kernel, the following vulnerability has been resolved:

scsi: sd: Fix error handling in sd_probe() after large pool creation failure

After device_add(&sdkp->disk_dev) succeeds, sd_large_pool_create() failure must unregister disk_dev and let scsi_disk_release() free sdkp. Going through out_free_index kfree()s an already registered device and leaks the sysfs entry.

EPSS

Процентиль: 36%
0.00423
Низкий

8.1 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
ubuntu
4 дня назад

(In the Linux kernel, the following vulnerability has been resolved: s ...)

CVSS3: 8.1
nvd
4 дня назад

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix error handling in sd_probe() after large pool creation failure After device_add(&sdkp->disk_dev) succeeds, sd_large_pool_create() failure must unregister disk_dev and let scsi_disk_release() free sdkp. Going through out_free_index kfree()s an already registered device and leaks the sysfs entry.

CVSS3: 8.1
debian
4 дня назад

In the Linux kernel, the following vulnerability has been resolved: s ...

EPSS

Процентиль: 36%
0.00423
Низкий

8.1 High

CVSS3