In the Linux kernel, the following vulnerability has been resolved:
scsi: elx: efct: Fix refcount leak in efcthwio_abort()
When efcthwreqtagalloc() fails in efcthwioabort(), the error path returns -ENOSPC without releasing the reference obtained via krefgetunlesszero() earlier in the function. All other error paths correctly drop the reference. This causes a permanent reference leak on the ioto_abort object.
Additionally, the abortinprogress flag is left set to true on this path, which means future abort attempts for the same I/O will immediately return -EINPROGRESS even though the abort was never submitted, effectively blocking recovery.
Fix this by adding the missing krefput() call and reset abortinprogress to false, matching the cleanup done in the efcthwwqwrite() failure path below.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72082.json",
"cna_assigner": "Linux"
}