CVE-2026-45997
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails If device_add(&sdkp->disk_dev) fails, put_device() runs scsi_disk_release(), which frees the scsi_disk but leaves the gendisk referenced. The device_add_disk() error path in sd_probe() calls put_disk(gd); call put_disk(gd) here to mirror that cleanup.
Severity
MEDIUM
CVSS score
5.5
(v3.1)
Vulnerability status
Modified
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-05-27 14:17:17.280000
Last modified
2026-11-06 17:17:29.033000
View original CVE JSON
{
"id": "CVE-2026-45997",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-05-27T14:17:17.280",
"lastModified": "2026-11-06T17:17:29.033",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sd: fix missing put_disk() when device_add(&disk_dev) fails\n\nIf device_add(&sdkp->disk_dev) fails, put_device() runs\nscsi_disk_release(), which frees the scsi_disk but leaves the gendisk\nreferenced. The device_add_disk() error path in sd_probe() calls\nput_disk(gd); call put_disk(gd) here to mirror that cleanup."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"drivers/scsi/sd.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "2c2c14b7dfccad8c5a28802849e40c21252e4c28",
"versionType": "git",
"status": "affected"
},
{
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "262152ec37101f9dc524743ccdbd6c7641d14573",
"versionType": "git",
"status": "affected"
},
{
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "b64b4f499801b12d0e2785447e4df6c164c608a9",
"versionType": "git",
"status": "affected"
},
{
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "13e550fbfccdb311e76ec96892dfe35f0dba0657",
"versionType": "git",
"status": "affected"
},
{
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "a95d38c5701431bfc826e7b18acc0785919d5c88",
"versionType": "git",
"status": "affected"
},
{
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "1e111c4b3a726df1254670a5cc4868cedb946d37",
"versionType": "git",
"status": "affected"
},
{
"version": "d56459d361a9a99bead8b594635353053271356c",
"versionType": "git",
"status": "affected"
},
{
"version": "a3e5a9208466b63f27a2509a691023b446ea5105",
"versionType": "git",
"status": "affected"
},
{
"version": "4e8e6427319de323f613caa8fd37120df83138d0",
"versionType": "git",
"status": "affected"
},
{
"version": "eadb60bcc2005247d97dcb3becee57aba4024ff4",
"versionType": "git",
"status": "affected"
},
{
"version": "350d048cc506368a316f0bc4082426b24a2a9fc0",
"versionType": "git",
"status": "affected"
},
{
"version": "60df9f55562a57173a11b6c7011eee40dfa48157",
"versionType": "git",
"status": "affected"
},
{
"version": "e95f62013a1159eeea752bb52df0683ee77f70ca",
"versionType": "git",
"status": "affected"
},
{
"version": "4.4.288",
"lessThan": "4.5",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.9.286",
"lessThan": "4.10",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.14.250",
"lessThan": "4.15",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.19.210",
"lessThan": "4.20",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.4.152",
"lessThan": "5.5",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.10.72",
"lessThan": "5.11",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.14.11",
"lessThan": "5.15",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"drivers/scsi/sd.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "5.15",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.15",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.175",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.140",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.86",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.27",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.0.4",
"lessThanOrEqual": "7.0.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.1",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
},
{
"source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"affectedData": [
{
"vendor": "Siemens",
"product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"lessThan": "*",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-11-06T16:04:27.670542Z",
"id": "CVE-2026-45997",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.4.288",
"versionEndExcluding": "4.5",
"matchCriteriaId": "F03F9BA4-CCF9-4A10-B849-63D309580F3B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.9.286",
"versionEndExcluding": "4.10",
"matchCriteriaId": "BFC2D553-7977-4EE1-9AD0-07A8D23E2417"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.14.250",
"versionEndExcluding": "4.15",
"matchCriteriaId": "1EB516A4-E6C1-42C9-92A8-8AC97D12C79C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.19.210",
"versionEndExcluding": "4.20",
"matchCriteriaId": "F612FB49-058A-431F-A8F2-5A2A547E534D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.4.152",
"versionEndExcluding": "5.5",
"matchCriteriaId": "67E7A6FF-6541-403A-8CBF-E7367726267A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10.72",
"versionEndExcluding": "5.11",
"matchCriteriaId": "A4A7A46D-85E6-4ADC-833A-2E5F0B651480"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.14.11",
"versionEndExcluding": "5.15",
"matchCriteriaId": "3C67C5EC-7ED4-407D-9800-198B7F076D0F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15.1",
"versionEndExcluding": "6.1.175",
"matchCriteriaId": "1CA44076-21AC-4B6F-AC20-FDF981785CB0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.140",
"matchCriteriaId": "A1A92866-F406-43B5-B2D1-CFC274753E9D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.12.86",
"matchCriteriaId": "55DA1C62-9991-451E-B8A8-E0004E00F789"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.13",
"versionEndExcluding": "6.18.27",
"matchCriteriaId": "A10AC84F-C058-47D5-85B4-E6E51A613B74"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.19",
"versionEndExcluding": "7.0.4",
"matchCriteriaId": "CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:*",
"matchCriteriaId": "40D9C0D1-0F32-4A2B-9840-1072F5497540"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*",
"matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*",
"matchCriteriaId": "AF55383D-4DF2-45DC-93F7-571F4F978EAB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*",
"matchCriteriaId": "9E9481B2-8AA6-4CBD-B5D3-C10F51FF6D01"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc6:*:*:*:*:*:*",
"matchCriteriaId": "EBD45831-4B79-42BC-ABC0-86870F0DEA89"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc7:*:*:*:*:*:*",
"matchCriteriaId": "948A6B8D-1B72-4945-8680-354E53BE1C80"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/13e550fbfccdb311e76ec96892dfe35f0dba0657",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1e111c4b3a726df1254670a5cc4868cedb946d37",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/262152ec37101f9dc524743ccdbd6c7641d14573",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2c2c14b7dfccad8c5a28802849e40c21252e4c28",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a95d38c5701431bfc826e7b18acc0785919d5c88",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b64b4f499801b12d0e2785447e4df6c164c608a9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html",
"source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"
}
]
}