Lucene search
+L

12 matches found

Cvelist
Cvelist
added 2026/09/17 4:08 p.m.36 views

CVE-2026-90268 scsi: sd: Fix error handling in sd_probe() after large pool creation failure

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix error handling in sdprobe after large pool creation failure After deviceadd&sdkp-diskdev succeeds, sdlargepoolcreate failure must unregister diskdev and let scsidiskrelease free sdkp. Going through outfreeindex kfre...

8.1CVSS0.00189EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/17 4:08 p.m.5 views

EUVD-2026-81860

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix specialvec mempool leak when scsiallocsgtables fails sdsetspecialbvec allocates a special payload page for UNMAP and WRITE SAME commands. If scsiallocsgtables fails afterward in sdsetupunmapcmnd or...

0.00155EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/17 4:08 p.m.6 views

CVE-2026-90267

CVE-2026-90267 affects the Linux kernel SCSI disk driver (scsi: sd). The vulnerability is a mempool leak of the special_vec page used for UNMAP and WRITE SAME commands. When sd_set_special_bvec() allocates the payload page and a subsequent call to scsi_alloc_sgtables() fails (in sd_setup_unmap_cm...

0.00155EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/27 2:17 p.m.17 views

CVE-2026-45997

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing putdisk when deviceadd&diskdev fails If deviceadd&sdkp-diskdev fails, putdevice runs scsidiskrelease, which frees the scsidisk but leaves the gendisk referenced. The deviceadddisk error path in sdprobe calls...

5.5CVSS0.00123EPSS
SaveExploits0References6
OSV
OSV
added 2026/05/27 2:17 p.m.31 views

UBUNTU-CVE-2026-45997

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing putdisk when deviceadd&diskdev fails If deviceadd&sdkp-diskdev fails, putdevice runs scsidiskrelease, which frees the scsidisk but leaves the gendisk referenced. The deviceadddisk error path in sdprobe calls...

5.5CVSS5.7AI score0.00123EPSS
SaveExploits0References23
Cvelist
Cvelist
added 2026/05/27 12:55 p.m.52 views

CVE-2026-45997 scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing putdisk when deviceadd&diskdev fails If deviceadd&sdkp-diskdev fails, putdevice runs scsidiskrelease, which frees the scsidisk but leaves the gendisk referenced. The deviceadddisk error path in sdprobe calls...

0.00123EPSS
SaveExploits0References6
OSV
OSV
added 2026/05/27 12:55 p.m.11 views

CVE-2026-45997 scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing putdisk when deviceadd&diskdev fails If deviceadd&sdkp-diskdev fails, putdevice runs scsidiskrelease, which frees the scsidisk but leaves the gendisk referenced. The deviceadddisk error path in sdprobe calls...

5.8AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.24 views

PT-2026-43864

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference-count leak occurs in the SCSI subsystem. When the device add&disk dev function fails, put device triggers scsi disk release, which frees the scsi disk but fails to release th...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:00 a.m.4 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988903 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix potential NULL pointer dereference If sdprobe sees an early error before sdkp-devic...

5.5CVSS6AI score0.00263EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/02/27 3:07 a.m.6 views

SUSE CVE-2022-49376

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix potential NULL pointer dereference If sdprobe sees an early error before sdkp-device is initialized, sdzbcreleasedisk is called. This causes a NULL pointer dereference when sdiszoned is called inside that function...

5.5CVSS6.1AI score0.00263EPSS
SaveExploits0References9
OSV
OSV
added 2025/02/26 7:01 a.m.9 views

UBUNTU-CVE-2022-49376

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix potential NULL pointer dereference If sdprobe sees an early error before sdkp-device is initialized, sdzbcreleasedisk is called. This causes a NULL pointer dereference when sdiszoned is called inside that function...

5.5CVSS6.1AI score0.00263EPSS
SaveExploits0References8
Oracle linux
Oracle linux
added 2021/01/12 12:00 a.m.114 views

Unbreakable Enterprise kernel security update

5.4.17-2036.102.0.2uek - xen-blkback: set ring-xenblkd to NULL after kthreadstop Pawel Wieczorkiewicz Orabug: 32260252 CVE-2020-29569 - xenbus/xenbusbackend: Disallow pending watch messages SeongJae Park Orabug: 32253409 CVE-2020-29568 - xen/xenbus: Count pending messages for each watch SeongJae...

8.8CVSS8.4AI score0.06692EPSS
SaveExploits1
Rows per page
Query Builder