Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix error handling in sd_probe() after large pool creation failure After device_add(&sdkp->disk_dev) succeeds, sd_large_pool_create() failure must unregister disk_dev and let scsi_disk_release() free sdkp. Going through out_free_index kfree()s an already registered device and leaks the sysfs entry.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 7179e626b76eb42f2529c6f6dd6ba88ea2445372 before 748a14a0d41cfe3017251c11b314f85045414942; affected 7179e626b76eb42f2529c6f6dd6ba88ea2445372 before e3cc6ea1a745e7f5d326f919a428b244fa119d8f |
| Linux / Linux | affected 7.1; unaffected 0 before 7.1; unaffected 7.2.6 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.