Vulnerability in Linux

CVE-2026-63890

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker drivers/scsi/fcoe/fcoe_ctlr.c::fcoe_ctlr_recv_clr_vlink() advanced the descriptor cursor by an attack…

EPSS: 0.002 (11.4th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 97c8389d54b9665c38105ea72a428a44b97ff2f6, 2.6.30, 0

References