CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's SCSI subsystem, specifically within the efct driver, where a reference count leak occurs during error handling in the efct_hw_io_abort() function. This leak can lead to resource exhaustion and prevent future abort attempts from being processed, resulting in potential denial-of-service conditions. Linux system administrators and developers using affected kernel versions should prioritize applying the fix to ensure system stability and prevent operational disruptions.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() When efct_hw_reqtag_alloc() fails in efct_hw_io_abort(), the error path returns -ENOSPC without releasing the reference obtained via kref_get_unless_zero() earlier in the function. All other error paths correctly drop the reference. This causes a permanent reference leak on the io_to_abort object. Additionally, the abort_in_progress flag is left set to true on this path, which means future abort attempts for the same I/O will immediately return -EINPROGRESS even though the abort was never submitted, effectively blocking recovery. Fix this by adding the missing kref_put() call and reset abort_in_progress to false, matching the cleanup done in the efct_hw_wq_write() failure path below.