U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2026-63889

Change History

New CVE Received from kernel.org 7/19/2026 12:17:06 PM

Action Type Old Value New Value
Added Description

                  
                
              
In the Linux kernel, the following vulnerability has been resolved:

scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32

An adjacent Fibre Channel fabric actor that can deliver an FPIN ELS
frame to an lpfc or qla2xxx Linux initiator can trigger a non-return in
the generic FC transport. This is not a local userspace or IP network
path; the attacker must be able to inject fabric traffic, for example as
a compromised switch or fabric controller, or as a same-zone N_Port on a
fabric that permits source spoofing.

The Link-Integrity and Peer-Congestion FPIN walkers used a u8 loop
counter against the 32-bit on-wire pname_count field, and did not bound
pname_count by the descriptor body already validated by the TLV walker.
A pname_count of 256 therefore wraps the counter and keeps the loop
condition true indefinitely.

Factor the shared pname_list[] walk into one helper, widen the counter
to u32, and clamp pname_count against the entries that fit in the
descriptor body before iterating.
Added Reference

                  
                
              
https://git.kernel.org/stable/c/07776b7779c9426982c1ad74aad91bd531593790
Added Reference

                  
                
              
https://git.kernel.org/stable/c/163bd704d7515c3df6c2e03bcba93d1db79edbff
Added Reference

                  
                
              
https://git.kernel.org/stable/c/29f126f09e34a425b376b3646c89aa7cc18b142c
Added Reference

                  
                
              
https://git.kernel.org/stable/c/35461d23744175a78b6280293892cca357c22793
Added Reference

                  
                
              
https://git.kernel.org/stable/c/a9a39233ec1fc9f97ea1340a4d09bb7ec2be5153
Added Reference

                  
                
              
https://git.kernel.org/stable/c/bdff76dff6ec23d6fe35812fa33e5c4ce2cdb770
Added Reference

                  
                
              
https://git.kernel.org/stable/c/ee57b89e5da9fffbe0d26647e4ff0750dacb9943
Added Affected

                  
                
              
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/scsi/scsi_transport_fc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"3dcfe0de5a9752e646a61f4ce513ac059960c7c3","lessThan":"07776b7779c9426982c1ad74aad91bd531593790","versionType":"git","status":"affected"},{"version":"3dcfe0de5a9752e646a61f4ce513ac059960c7c3","lessThan":"29f126f09e34a425b376b3646c89aa7cc18b142c","versionType":"git","status":"affected"},{"version":"3dcfe0de5a9752e646a61f4ce513ac059960c7c3","lessThan":"163bd704d7515c3df6c2e03bcba93d1db79edbff","versionType":"git","status":"affected"},{"version":"3dcfe0de5a9752e646a61f4ce513ac059960c7c3","lessThan":"ee57b89e5da9fffbe0d26647e4ff0750dacb9943","versionType":"git","status":"affected"},{"version":"3dcfe0de5a9752e646a61f4ce513ac059960c7c3","lessThan":"35461d23744175a78b6280293892cca357c22793","versionType":"git","status":"affected"},{"version":"3dcfe0de5a9752e646a61f4ce513ac059960c7c3","lessThan":"bdff76dff6ec23d6fe35812fa33e5c4ce2cdb770","versionType":"git","status":"affected"},{"version":"3dcfe0de5a9752e646a61f4ce513ac059960c7c3","lessThan":"a9a39233ec1fc9f97ea1340a4d09bb7ec2be5153","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/scsi/scsi_transport_fc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.11","status":"affected"},{"version":"0","lessThan":"5.11","versionType":"semver","status":"unaffected"},{"version":"5.15.210","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.176","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.143","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.93","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.35","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.0.12","lessThanOrEqual":"7.0.*","versionType":"semver","status":"unaffected"},{"version":"7.1","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]