Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-46079

In the Linux kernel, the following vulnerability has been resolved: rbd: fix null-ptr-deref when device_add_disk() fails do_rbd_add() publishes the device with device_add() before calling device_add_disk(). If device_add_disk() fails after device_add() succeeds, the error path calls rbd_free_disk() directly and then later falls through to rbd_dev_device_release(), which calls rbd_free_disk() again. This double teardown can leave blk-mq cleanup operating on invalid state and trigger a null-ptr-
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b1857c90f87ccd3cc4f6f5b9cd8a4de30189ccc38ff5105bffa813d1b6a86486
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/block/rbd.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.16"},{"lessThan":"5.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.140","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.86","versionType":"semver"},{"lessThanOrEq…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:00b6858b5c847b22949bc5681dd5662496e49f67c06276581d600abc42101f7a · sha256:9db4cd76502d0c4e… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/block/rbd.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"78bd0c143dea4b7a4c23c13356987ca0eafb442e","status":"affected","version":"27c97abc30e2b9ad2288977c0ecbef4d50553f57","versionType":"git"},{"lessThan":"2f4809a879f0750c7790bbeeae86c9505797a06f","status":"affected","version":"27c97abc30e2b9ad2288977c0ecbef4d50553f57","versionType":"git"},{"lessThan":"564cd8f4aeb9a938e470c5c91922fd02e4d41acc","status":"affected","version":"27c97abc30e2b9ad2288977c0e…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:00b6858b5c847b22949bc5681dd5662496e49f67c06276581d600abc42101f7a · sha256:9db4cd76502d0c4e… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/block/rbd.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.16"},{"lessThan":"5.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.140","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.86","versionType":"semver"},{"lessThanOrEq…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:00b6858b5c847b22949bc5681dd5662496e49f67c06276581d600abc42101f7a · sha256:9db4cd76502d0c4e… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/block/rbd.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"78bd0c143dea4b7a4c23c13356987ca0eafb442e","status":"affected","version":"27c97abc30e2b9ad2288977c0ecbef4d50553f57","versionType":"git"},{"lessThan":"2f4809a879f0750c7790bbeeae86c9505797a06f","status":"affected","version":"27c97abc30e2b9ad2288977c0ecbef4d50553f57","versionType":"git"},{"lessThan":"564cd8f4aeb9a938e470c5c91922fd02e4d41acc","status":"affected","version":"27c97abc30e2b9ad2288977c0e…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:00b6858b5c847b22949bc5681dd5662496e49f67c06276581d600abc42101f7a · sha256:9db4cd76502d0c4e… · /containers/cna/affected/0

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/059fb7656723c1b77c2fc0e64b7aa99d6bb65e8e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:00b6858b5c847b22949bc5681dd5662496e49f67c06276581d600abc42101f7a · sha256:9db4cd76502d0c4e… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/2f4809a879f0750c7790bbeeae86c9505797a06f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:00b6858b5c847b22949bc5681dd5662496e49f67c06276581d600abc42101f7a · sha256:9db4cd76502d0c4e… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/564cd8f4aeb9a938e470c5c91922fd02e4d41acc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:00b6858b5c847b22949bc5681dd5662496e49f67c06276581d600abc42101f7a · sha256:9db4cd76502d0c4e… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/78bd0c143dea4b7a4c23c13356987ca0eafb442e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:00b6858b5c847b22949bc5681dd5662496e49f67c06276581d600abc42101f7a · sha256:9db4cd76502d0c4e… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/ad0126ffcba8777109852979eaaa6dca6703abdb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:00b6858b5c847b22949bc5681dd5662496e49f67c06276581d600abc42101f7a · sha256:9db4cd76502d0c4e… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/d1fef92e414433ca7b89abf85cb0df42b8d475eb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:00b6858b5c847b22949bc5681dd5662496e49f67c06276581d600abc42101f7a · sha256:9db4cd76502d0c4e… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer