{"apiVersion":"1.0","identifier":"CVE-2026-72082","description":"In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() When efct_hw_reqtag_alloc() fails in efct_hw_io_abort(), the error path returns -ENOSPC without releasing the reference obtained via kref_get_unless_zero() earlier in the function. All other error paths correctly drop the reference. This causes a permanent reference leak on the io_to_abort object. Additionally, the abort_in_progress flag is left set to true on this path, which means future abort attempts for the same I/O will immediately return -EINPROGRESS even though the abort was never submitted, effectively blocking recovery. Fix this by adding the missing kref_put() call and reset abort_in_progress to false, matching the cleanup done in the efct_hw_wq_write() failure path below.","publishedAt":"2026-08-15T06:21:18","lastModifiedAt":"2026-08-17T06:18:06","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72082","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00215,"riskScore":0,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-72082","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-72082","en":"https://www.redsauce.net/en/cves/CVE-2026-72082","fr":"https://www.redsauce.net/fr/cves/CVE-2026-72082","pt":"https://www.redsauce.net/pt/cves/CVE-2026-72082","de":"https://www.redsauce.net/de/cves/CVE-2026-72082","sk":"https://www.redsauce.net/sk/cves/CVE-2026-72082","el":"https://www.redsauce.net/el/cves/CVE-2026-72082"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-72082"}}