Null Pointer Dereference in Linux Kernel RBD Disk Management

CVE-2026-46079

What is CVE-2026-46079?

A vulnerability exists in the Linux kernel's RBD disk management system where a null pointer dereference can occur during the disk addition process. Specifically, when adding a disk, if the device_add_disk() function fails after successfully calling device_add(), the error handling path can lead to a double cleanup of the disk resources. This unintended behavior can disrupt block device cleanup processes, potentially causing system instability and crashes. A patch has been released to enforce a proper teardown order that prevents the double free operation, thereby addressing the associated risks.

References