Vulnerability in Linux

CVE-2026-72081

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efct_dispatch_fcp_cmd() allocates an efct_io before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before handing the IO to the SCSI layer. Free the allocated IO before returning from this error path.

Affected products

  • Linux — versions f45ae6aac0a077ca15a6e7baae0a62eef099ea7d, 5.14, 0

References