CVE-2026-72082
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() When efct_hw_reqtag_alloc() fails in efct_hw_io_abort(), the error path returns -ENOSPC without releasing the reference obtained via kref_get_unless_zero() earlier in the function. All other error paths correctly drop the reference. This causes a permanent reference leak on the io_to_abort object. Additionally, the abort_in_progress flag is left set to true on this path, which means future abort attempts for the same I/O will immediately return -EINPROGRESS even though the abort was never submitted, effectively blocking recovery. Fix this by adding the missing kref_put() call and reset abort_in_progress to false, matching the cleanup done in the efct_hw_wq_write() failure path below.
How to fix
- Linux Linuxcf97ea7b164a1881c7219f5222219c9d0fac4204, 1c6e186c722cfa9a58ebe841f91ab2ddf8570cc7, 62cf39a9770a6f29df59fd0edb0a05234a8b07f2, faa59add4808fbf92e7d15bfd8770d2682c2b953, 9b871369cbb4532f6715e044d6b9c4ceb036e5b6, 747eaead2db298abfda2aa505f6d03775b40fe5f, 2c007acf7b31c39c08ce4959451ad00b19be4c1f or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 63de51327a64c74e85611a0161eaae71256a3b6d ≤ v < cf97ea7b164a1881c7219f5222219c9d0fac4204, 63de51327a64c74e85611a0161eaae71256a3b6d ≤ v < 1c6e186c722cfa9a58ebe841f91ab2ddf8570cc7, 63de51327a64c74e85611a0161eaae71256a3b6d ≤ v < 62cf39a9770a6f29df59fd0edb0a05234a8b07f2, 63de51327a64c74e85611a0161eaae71256a3b6d ≤ v < faa59add4808fbf92e7d15bfd8770d2682c2b953, 63de51327a64c74e85611a0161eaae71256a3b6d ≤ v < 9b871369cbb4532f6715e044d6b9c4ceb036e5b6, 63de51327a64c74e85611a0161eaae71256a3b6d ≤ v < 747eaead2db298abfda2aa505f6d03775b40fe5f, 63de51327a64c74e85611a0161eaae71256a3b6d ≤ v < 2c007acf7b31c39c08ce4959451ad00b19be4c1f, 5.14 | cf97ea7b164a1881c7219f5222219c9d0fac4204, 1c6e186c722cfa9a58ebe841f91ab2ddf8570cc7, 62cf39a9770a6f29df59fd0edb0a05234a8b07f2, faa59add4808fbf92e7d15bfd8770d2682c2b953, 9b871369cbb4532f6715e044d6b9c4ceb036e5b6, 747eaead2db298abfda2aa505f6d03775b40fe5f, 2c007acf7b31c39c08ce4959451ad00b19be4c1f |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.