Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-72081

scsi: elx: efct: Fix I/O leak on unsupported additional CDB

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efct_dispatch_fcp_cmd() allocates an efct_io before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before handing the IO to the SCSI layer. Free the allocated IO before returning from this error path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f45ae6aac0a077ca15a6e7baae0a62eef099ea7d to < 42a391d508e1f52fda5d81344e100a53c00898e3affected
  • f45ae6aac0a077ca15a6e7baae0a62eef099ea7d to < 9d479f50a6067954259414aa66d816c7df081286affected
  • f45ae6aac0a077ca15a6e7baae0a62eef099ea7d to < 8c689a8f229223cec4a821c65cfe40f8e8c56470affected
  • f45ae6aac0a077ca15a6e7baae0a62eef099ea7d to < 235159f75ab6f95484494db4cc031663e5ee4680affected
  • f45ae6aac0a077ca15a6e7baae0a62eef099ea7d to < df87532e9212238509f23effd0ca39d9c3062d21affected
  • f45ae6aac0a077ca15a6e7baae0a62eef099ea7d to < 94cbfed191248dc88c23fc881119bb399486ddfdaffected
  • f45ae6aac0a077ca15a6e7baae0a62eef099ea7d to < 9cb2d5291dbfe7bed565ead3337047dee9ed1064affected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References