{"id":"CVE-2026-90268","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sd: Fix error handling in sd_probe() after large pool creation failure\n\nAfter device_add(&sdkp->disk_dev) succeeds, sd_large_pool_create()\nfailure must unregister…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sd: Fix error handling in sd_probe() after large pool creation failure\n\nAfter device_add(&sdkp->disk_dev) succeeds, sd_large_pool_create()\nfailure must unregister…","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= 7179e626b76eb42f2529c6f6dd6ba88ea2445372 < 748a14a0d41cfe3017251c11b314f85045414942","Linux >= 7179e626b76eb42f2529c6f6dd6ba88ea2445372 < e3cc6ea1a745e7f5d326f919a428b244fa119d8f","Linux 7.1"],"published":"2026-09-17","updated":"2026-09-18","sourceUpdated":"2026-09-18T18:17:51.443","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90268","references":[{"url":"https://git.kernel.org/stable/c/748a14a0d41cfe3017251c11b314f85045414942","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e3cc6ea1a745e7f5d326f919a428b244fa119d8f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00423,"epssPercentile":0.36248,"ingestedAt":"2026-09-17T16:21:47.839Z","slug":"CVE-2026-90268","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sd: Fix error handling in sd_probe() after large pool creation failure\n\nAfter device_add(&sdkp->disk_dev) succeeds, sd_large_pool_create()\nfailure must unregister disk_dev and let scsi_disk_release() free\nsdkp. Going through out_free_index kfree()s an already registered device\nand leaks the sysfs entry.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":207223,"id":"CVE-2026-90268","ts":1789757339748,"field":"cvss","old":null,"new":"8.1"},{"seq":207222,"id":"CVE-2026-90268","ts":1789757339748,"field":"severity","old":"none","new":"high"}]}