CVE-2026-72082scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() When efct_hw_reqtag_alloc() fails in efct_hw_io_abort(), the error path returns -ENOSPC without releasing the reference obtained via kref_get_unless_zero() earlier in the function. All other error paths correctly drop the reference. This causes a permanent reference leak on the io_to_abort object. Additionally, the abort_in_progress flag is left set to true on this path, which means future abort attempts for the same I/O will immediately return -EINPROGRESS even though the abort was never submitted, effectively blocking recovery. Fix this by adding the missing kref_put() call and reset abort_in_progress to false, matching the cleanup done in the efct_hw_wq_write() failure path below.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 63de51327a64c74e85611a0161eaae71256a3b6d before cf97ea7b164a1881c7219f5222219c9d0fac4204; 63de51327a64c74e85611a0161eaae71256a3b6d builds before 1c6e186c722cfa9a58ebe841f91ab2ddf8570cc7; 63de51327a64c74e85611a0161eaae71256a3b6d builds before 62cf39a9770a6f29df59fd0edb0a05234a8b07f2; from 63de51327a64c74e85611a0161eaae71256a3b6d before faa59add4808fbf92e7d15bfd8770d2682c2b953; 63de51327a64c74e85611a0161eaae71256a3b6d builds before 9b871369cbb4532f6715e044d6b9c4ceb036e5b6; from 63de51327a64c74e85611a0161eaae71256a3b6d before 747eaead2db298abfda2aa505f6d03775b40fe5f; 63de51327a64c74e85611a0161eaae71256a3b6d builds before 2c007acf7b31c39c08ce4959451ad00b19be4c1f | CNA record |
References
- https://git.kernel.org/stable/c/cf97ea7b164a1881c7219f5222219c9d0fac4204
- https://git.kernel.org/stable/c/1c6e186c722cfa9a58ebe841f91ab2ddf8570cc7
- https://git.kernel.org/stable/c/62cf39a9770a6f29df59fd0edb0a05234a8b07f2
- https://git.kernel.org/stable/c/faa59add4808fbf92e7d15bfd8770d2682c2b953
- https://git.kernel.org/stable/c/9b871369cbb4532f6715e044d6b9c4ceb036e5b6
- https://git.kernel.org/stable/c/747eaead2db298abfda2aa505f6d03775b40fe5f
- https://git.kernel.org/stable/c/2c007acf7b31c39c08ce4959451ad00b19be4c1f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.