CVE-2026-63890

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the FCoE (Fibre Channel over Ethernet) control VLAN walker where the fcoe ctlr recv clr vlink() function in drivers/scsi/fcoe/fcoe ctlr.c fails to validate the length of FIP descriptors. Specifically, when processing a FIP DT NON CRITICAL descriptor (where fip dtype is 128 or greater), the system does not verify that the fip dlen variable is at least the size of a fip desc structure. An unauthenticated L2 peer can exploit this by sending a FIP CVL frame with a fip dlen of 0, causing the fcoe ctlr recv work function to enter an infinite loop. This results in a denial of service by indefinitely hanging the initiator on fcoe, qedf, or bnx2fc controllers and blocking all subsequent FIP frames.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.