01 Record

CVE-2026-45997

scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.4% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-27 12:55Z3 MO AGO

Last updated

2026-06-14 17:47Z2 MO AGO

Reserved

2026-05-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

542a0b9f9f5f667726bd171b47e1667e217c0321d7aa75cb127999033b9671d9

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux265dfe8ebbabae7959060bd1c3f75c2473b697ed to < 2c2c14b7dfccad8c5a28802849e40c21252e4c28, 265dfe8ebbabae7959060bd1c3f75c2473b697ed to < 262152ec37101f9dc524743ccdbd6c7641d14573, 265dfe8ebbabae7959060bd1c3f75c2473b697ed to < b64b4f499801b12d0e2785447e4df6c164c608a9, 265dfe8ebbabae7959060bd1c3f75c2473b697ed to < 13e550fbfccdb311e76ec96892dfe35f0dba0657, 265dfe8ebbabae7959060bd1c3f75c2473b697ed to < a95d38c5701431bfc826e7b18acc0785919d5c88, 265dfe8ebbabae7959060bd1c3f75c2473b697ed to < 1e111c4b3a726df1254670a5cc4868cedb946d37, d56459d361a9a99bead8b594635353053271356c, a3e5a9208466b63f27a2509a691023b446ea5105, 4e8e6427319de323f613caa8fd37120df83138d0, eadb60bcc2005247d97dcb3becee57aba4024ff4, 350d048cc506368a316f0bc4082426b24a2a9fc0, 60df9f55562a57173a11b6c7011eee40dfa48157, e95f62013a1159eeea752bb52df0683ee77f70ca, 4.4.288 to < 4.5, 4.9.286 to < 4.10, 4.14.250 to < 4.15, 4.19.210 to < 4.20, 5.4.152 to < 5.5, 5.10.72 to < 5.11, 5.14.11 to < 5.15, 5.15—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/2c2c14b7dfccad8c5a28802849e40c21252e4c28
git.kernel.orghttps://git.kernel.org/stable/c/262152ec37101f9dc524743ccdbd6c7641d14573
git.kernel.orghttps://git.kernel.org/stable/c/b64b4f499801b12d0e2785447e4df6c164c608a9
git.kernel.orghttps://git.kernel.org/stable/c/13e550fbfccdb311e76ec96892dfe35f0dba0657
git.kernel.orghttps://git.kernel.org/stable/c/a95d38c5701431bfc826e7b18acc0785919d5c88
git.kernel.orghttps://git.kernel.org/stable/c/1e111c4b3a726df1254670a5cc4868cedb946d37

01 Record index

CVE-2026-45997

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-45997

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References