CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB
In the Linux kernel, the following vulnerability has been resolved:
scsi: elx: efct: Fix I/O leak on unsupported additional CDB
efctdispatchfcpcmd() allocates an efctio before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before handing the IO to the SCSI layer.
Free the allocated IO before returning from this error path.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72081?
CVE-2026-72081 has a risk rating of 11, indicating a critical vulnerability.
How do I fix CVE-2026-72081?
To fix CVE-2026-72081, update to the latest version of the Linux kernel that addresses this vulnerability.
What software is affected by CVE-2026-72081?
CVE-2026-72081 affects the Linux kernel.
What does CVE-2026-72081 impact?
CVE-2026-72081 impacts SCSI commands, specifically related to the efct_dispatch_fcp_cmd() function.
Is CVE-2026-72081 exploitable?
Yes, CVE-2026-72081 could be exploited if an unsupported additional command descriptor block is processed.