CVE-2026-72081

Summary

In the Linux kernel, the following vulnerability has been resolved:

scsi: elx: efct: Fix I/O leak on unsupported additional CDB

efct_dispatch_fcp_cmd() allocates an efct_io before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before handing the IO to the SCSI layer.

Free the allocated IO before returning from this error path.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf45ae6aac0a077ca15a6e7baae0a62eef099ea7d < 42a391d508e1f52fda5d81344e100a53c00898e3affected
LinuxLinuxf45ae6aac0a077ca15a6e7baae0a62eef099ea7d < 9d479f50a6067954259414aa66d816c7df081286affected
LinuxLinuxf45ae6aac0a077ca15a6e7baae0a62eef099ea7d < 8c689a8f229223cec4a821c65cfe40f8e8c56470affected
LinuxLinuxf45ae6aac0a077ca15a6e7baae0a62eef099ea7d < 235159f75ab6f95484494db4cc031663e5ee4680affected
LinuxLinuxf45ae6aac0a077ca15a6e7baae0a62eef099ea7d < df87532e9212238509f23effd0ca39d9c3062d21affected
LinuxLinuxf45ae6aac0a077ca15a6e7baae0a62eef099ea7d < 94cbfed191248dc88c23fc881119bb399486ddfdaffected
LinuxLinuxf45ae6aac0a077ca15a6e7baae0a62eef099ea7d < 9cb2d5291dbfe7bed565ead3337047dee9ed1064affected
LinuxLinux5.14affected
LinuxLinux0 < 5.14unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References