CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's SCSI subsystem, specifically in the error handling of the `sd_probe()` function following a failure in large pool creation. This flaw can lead to memory leaks and improper management of sysfs entries, potentially compromising system stability and resource allocation. Organizations using Linux systems, particularly those relying on SCSI devices, should prioritize addressing this issue to maintain optimal performance and security.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix error handling in sd_probe() after large pool creation failure After device_add(&sdkp->disk_dev) succeeds, sd_large_pool_create() failure must unregister disk_dev and let scsi_disk_release() free sdkp. Going through out_free_index kfree()s an already registered device and leaks the sysfs entry.