CVE-2026-72081

CVE-2026-72081

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: elx: efct: Fix I/O leak on unsupported additional CDB

efct_dispatch_fcp_cmd() allocates an efct_io before dispatching an

unsolicited FCP command. If the command has an unsupported additional

CDB, the function returns -EIO before handing the IO to the SCSI layer.

Free the allocated IO before returning from this error path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.2th percentile
Published
2026-08-15T10:21Z
References (7)
https://git.kernel.org/stable/c/235159f75ab6f95484494db4cc031663e5ee4680 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/42a391d508e1f52fda5d81344e100a53c00898e3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8c689a8f229223cec4a821c65cfe40f8e8c56470 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/94cbfed191248dc88c23fc881119bb399486ddfd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9cb2d5291dbfe7bed565ead3337047dee9ed1064 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9d479f50a6067954259414aa66d816c7df081286 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/df87532e9212238509f23effd0ca39d9c3062d21 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 05:52Z
    scsi: elx: efct: Fix I/O leak on unsupported additional CDB
    cvelistv5