SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-72081

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of unsolicited FCP commands in the efct_dispatch_fcp_cmd() function, where an I/O leak occurs if an unsupported additional CDB is encountered. This could lead to resource exhaustion due to unfreed memory allocations, potentially impacting system stability and performance. Organizations using affected Linux kernel versions should prioritize patching this issue to maintain system integrity and prevent potential denial-of-service scenarios.

CVE
CVE-2026-72081
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efct_dispatch_fcp_cmd() allocates an efct_io before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before handing the IO to the SCSI layer. Free the allocated IO before returning from this error path.