CVE-2026-90268

A flaw was found in the Linux kernel's SCSI disk (sd) driver. Improper error handling during the probing of a SCSI device, specifically after a large pool creation failure, can lead to a situation where an already registered device is freed and a system file system (sysfs) entry is leaked. This vulnerability could allow a local attacker to cause a denial of service by triggering a system crash or instability.

A flaw in the Linux kernel's SCSI disk (sd) driver error handling is rated by Red Hat as having moderate security impact. When a large pool creation failure occurs in sd_probe() after the disk device has already been registered, the error path incorrectly frees the already-registered device and leaks a sysfs entry. A local attacker with privileges who can trigger this specific error path during SCSI device probing could use this flaw to cause a denial of service by crashing or destabilizing the system; reliable exploitation is difficult because it depends on reaching the large pool creation failure path. All Red Hat Enterprise Linux, Red Hat Enterprise Linux Real Time, Red Hat In-Vehicle OS, and OpenShift Container Platform (RHCOS) kernels listed for this flaw are not affected because the vulnerable code is not present in the shipped versions; the RHEL 6 Extended Lifecycle Support stream is out of support scope. Red Hat's rating differs from the CVE.org score of 8.1 (IMPORTANT), mainly because the CVE.org vector assumes a network attack vector, while this flaw requires local access and privileges to trigger.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.