CVE-2022-49376

In the Linux kernel, the following vulnerability has been resolved:

scsi: sd: Fix potential NULL pointer dereference

If sdprobe() sees an early error before sdkp->device is initialized, sdzbcreleasedisk() is called. This causes a NULL pointer dereference when sdiszoned() is called inside that function. Avoid this by removing the call to sdzbcreleasedisk() in sdprobe() error path.

This change is safe and does not result in zone information memory leakage because the zone information for a zoned disk is allocated only when sdrevalidatedisk() is called, at which point sdkp->diskdev is fully set, resulting in sddiskrelease() being called when needed to cleanup a disk zone information using sdzbcreleasedisk().