CVE-2026-43192

dm mpath: Add missing dm_put_device when failing to get scsi dh name

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dm mpath: Add missing dm_put_device when failing to get scsi dh name

When commit fd81bc5cca8f ("scsi: device_handler: Return error pointer in

scsi_dh_attached_handler_name()") added code to fail parsing the path if

scsi_dh_attached_handler_name() failed with -ENOMEM, it didn't clean up

the reference to the path device that had just been taken. Fix this, and

steamline the error paths of parse_path() a little.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00143 · 3.3th percentile
Published
2026-05-06T11:28Z
EPSS history
Timeline
  • 06 MAY 11:28Z
    dm mpath: Add missing dm_put_device when failing to get scsi dh name
    cvelistv5