CVE-2026-90268

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An error handling issue exists in the sd probe() function within the SCSI subsystem. When sd large pool create() fails after device add(&sdkp->disk dev) has already succeeded, the system fails to properly unregister disk dev. This leads to a situation where the system attempts to free an already registered device via out free index and causes a sysfs entry leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.