CVE-2026-45997
Estado: AnalizadaMedia (5.5)—
In the Linux kernel, the following vulnerability has been resolved:
scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails
If device_add(&sdkp->disk_dev) fails, put_device() runs scsi_disk_release(), which frees the scsi_disk but leaves the gendisk referenced. The device_add_disk() error path in sd_probe() calls put_disk(gd); call put_disk(gd) here to mirror that cleanup.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 5.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.16%
- Percentil entre todas las CVEs puntuadas: 5
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-noinfo
Referencias
- https://git.kernel.org/stable/c/13e550fbfccdb311e76ec96892dfe35f0dba0657
- https://git.kernel.org/stable/c/1e111c4b3a726df1254670a5cc4868cedb946d37
- https://git.kernel.org/stable/c/262152ec37101f9dc524743ccdbd6c7641d14573
- https://git.kernel.org/stable/c/2c2c14b7dfccad8c5a28802849e40c21252e4c28
- https://git.kernel.org/stable/c/a95d38c5701431bfc826e7b18acc0785919d5c88
- https://git.kernel.org/stable/c/b64b4f499801b12d0e2785447e4df6c164c608a9
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-45997",
"cveTags": [],
"metrics": {
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "2c2c14b7dfccad8c5a28802849e40c21252e4c28",
"versionType": "git"
},
{
"status": "affected",
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "262152ec37101f9dc524743ccdbd6c7641d14573",
"versionType": "git"
},
{
"status": "affected",
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "b64b4f499801b12d0e2785447e4df6c164c608a9",
"versionType": "git"
},
{
"status": "affected",
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "13e550fbfccdb311e76ec96892dfe35f0dba0657",
"versionType": "git"
},
{
"status": "affected",
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "a95d38c5701431bfc826e7b18acc0785919d5c88",
"versionType": "git"
},
{
"status": "affected",
"version": "265dfe8ebbabae7959060bd1c3f75c2473b697ed",
"lessThan": "1e111c4b3a726df1254670a5cc4868cedb946d37",
"versionType": "git"
},
{
"status": "affected",
"version": "d56459d361a9a99bead8b594635353053271356c",
"versionType": "git"
},
{
"status": "affected",
"version": "a3e5a9208466b63f27a2509a691023b446ea5105",
"versionType": "git"
},
{
"status": "affected",
"version": "4e8e6427319de323f613caa8fd37120df83138d0",
"versionType": "git"
},
{
"status": "affected",
"version": "eadb60bcc2005247d97dcb3becee57aba4024ff4",
"versionType": "git"
},
{
"status": "affected",
"version": "350d048cc506368a316f0bc4082426b24a2a9fc0",
"versionType": "git"
},
{
"status": "affected",
"version": "60df9f55562a57173a11b6c7011eee40dfa48157",
"versionType": "git"
},
{
"status": "affected",
"version": "e95f62013a1159eeea752bb52df0683ee77f70ca",
"versionType": "git"
},
{
"status": "affected",
"version": "4.4.288",
"lessThan": "4.5",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.9.286",
"lessThan": "4.10",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.14.250",
"lessThan": "4.15",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.19.210",
"lessThan": "4.20",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.4.152",
"lessThan": "5.5",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.10.72",
"lessThan": "5.11",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.14.11",
"lessThan": "5.15",
"versionType": "semver"
}
],
"programFiles": [
"drivers/scsi/sd.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.15"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.15",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.1.175",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.140",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.86",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.27",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.0.4",
"versionType": "semver",
"lessThanOrEqual": "7.0.*"
},
{
"status": "unaffected",
"version": "7.1",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/scsi/sd.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-05-27T14:17:17.280",
"references": [
{
"url": "https://git.kernel.org/stable/c/13e550fbfccdb311e76ec96892dfe35f0dba0657",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/1e111c4b3a726df1254670a5cc4868cedb946d37",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/262152ec37101f9dc524743ccdbd6c7641d14573",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/2c2c14b7dfccad8c5a28802849e40c21252e4c28",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a95d38c5701431bfc826e7b18acc0785919d5c88",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/b64b4f499801b12d0e2785447e4df6c164c608a9",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sd: fix missing put_disk() when device_add(&disk_dev) fails\n\nIf device_add(&sdkp->disk_dev) fails, put_device() runs\nscsi_disk_release(), which frees the scsi_disk but leaves the gendisk\nreferenced. The device_add_disk() error path in sd_probe() calls\nput_disk(gd); call put_disk(gd) here to mirror that cleanup."
}
],
"lastModified": "2026-06-17T10:52:52.240",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F03F9BA4-CCF9-4A10-B849-63D309580F3B",
"versionEndExcluding": "4.5",
"versionStartIncluding": "4.4.288"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFC2D553-7977-4EE1-9AD0-07A8D23E2417",
"versionEndExcluding": "4.10",
"versionStartIncluding": "4.9.286"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EB516A4-E6C1-42C9-92A8-8AC97D12C79C",
"versionEndExcluding": "4.15",
"versionStartIncluding": "4.14.250"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F612FB49-058A-431F-A8F2-5A2A547E534D",
"versionEndExcluding": "4.20",
"versionStartIncluding": "4.19.210"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67E7A6FF-6541-403A-8CBF-E7367726267A",
"versionEndExcluding": "5.5",
"versionStartIncluding": "5.4.152"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4A7A46D-85E6-4ADC-833A-2E5F0B651480",
"versionEndExcluding": "5.11",
"versionStartIncluding": "5.10.72"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C67C5EC-7ED4-407D-9800-198B7F076D0F",
"versionEndExcluding": "5.15",
"versionStartIncluding": "5.14.11"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CA44076-21AC-4B6F-AC20-FDF981785CB0",
"versionEndExcluding": "6.1.175",
"versionStartIncluding": "5.15.1"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1A92866-F406-43B5-B2D1-CFC274753E9D",
"versionEndExcluding": "6.6.140",
"versionStartIncluding": "6.2"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55DA1C62-9991-451E-B8A8-E0004E00F789",
"versionEndExcluding": "6.12.86",
"versionStartIncluding": "6.7"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A10AC84F-C058-47D5-85B4-E6E51A613B74",
"versionEndExcluding": "6.18.27",
"versionStartIncluding": "6.13"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3",
"versionEndExcluding": "7.0.4",
"versionStartIncluding": "6.19"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40D9C0D1-0F32-4A2B-9840-1072F5497540"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF55383D-4DF2-45DC-93F7-571F4F978EAB"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E9481B2-8AA6-4CBD-B5D3-C10F51FF6D01"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBD45831-4B79-42BC-ABC0-86870F0DEA89"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "948A6B8D-1B72-4945-8680-354E53BE1C80"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}