CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB
Vulnerability summary
CVE-2026-72081 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 11.9% of scored vulnerabilities.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 23 · Related 23Timeline
- 15-08-2026PublishedVulnerability first disclosed.
- 17-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efct_dispatch_fcp_cmd() allocates an efct_io before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before handing the IO to the SCSI layer. Free the allocated IO before returning from this error path.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.21%
Chance of exploitation in the next 30 days
Percentile
12%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.21% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Ubuntu157 products
- linuxAll versions (No fix recorded) | < 5.15.0-198.208 | < 6.8.0-147.147 | < 7.0.0-38.38
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124 | < 6.8.0-1067.70 | < 7.0.0-1014.14
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.180-1 | < 6.12.100-1 | < 7.1.5-1
Linux1 product
- linux≥ f45ae6aac0a077ca15a6e7baae0a62eef099ea7d, < 42a391d508e1f52fda5d81344e100a53c00898e3 | ≥ f45ae6aac0a077ca15a6e7baae0a62eef099ea7d, < 9d479f50a6067954259414aa66d816c7df081286 | ≥ f45ae6aac0a077ca15a6e7baae0a62eef099ea7d, < 8c689a8f229223cec4a821c65cfe40f8e8c56470 | ≥ f45ae6aac0a077ca15a6e7baae0a62eef099ea7d, < 235159f75ab6f95484494db4cc031663e5ee4680 | ≥ f45ae6aac0a077ca15a6e7baae0a62eef099ea7d, < df87532e9212238509f23effd0ca39d9c3062d21 | ≥ f45ae6aac0a077ca15a6e7baae0a62eef099ea7d, < 94cbfed191248dc88c23fc881119bb399486ddfd | ≥ f45ae6aac0a077ca15a6e7baae0a62eef099ea7d, < 9cb2d5291dbfe7bed565ead3337047dee9ed1064 | 5.14
3 vendors · 159 products
