Riskcovery

CVE-2026-43192

dm mpath: Add missing dm_put_device when failing to get scsi dh name

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dm mpath: Add missing dm_put_device when failing to get scsi dh name

When commit fd81bc5cca8f ("scsi: device_handler: Return error pointer in scsi_dh_attached_handler_name()") added code to fail parsing the path if scsi_dh_attached_handler_name() failed with -ENOMEM, it didn't clean up the reference to the path device that had just been taken. Fix this, and steamline the error paths of parse_path() a little.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fd81bc5cca8fc6936a8988de6b5d4c5693b6587e to before 4aa5c37b7d8019f7296111c1add00e7214baae60Affected
  • fd81bc5cca8fc6936a8988de6b5d4c5693b6587e to before 787bd63ee661b0148ce8e1fde92b7afddd85c446Affected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.