CVE-2026-63890

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

F5 F5OS, Dell NetWorker, Debian Linux, Amazon Linux 2, Red Hat Enterprise Linux, IBM QRadar SIEM, Dell Avamar, RESF…

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker drivers/scsi/fcoe/fcoe_ctlr.c::fcoe_ctlr_recv_clr_vlink() advanced the descriptor cursor by an attacker-supplied fip_dlen without ever requiring dlen >= sizeof(struct fip_desc) in the default branch. The named descriptor cases (FIP_DT_MAC, FIP_DT_NAME, FIP_DT_VN_ID) checked their per-type minimum lengths, but a FIP_DT_NON_CRITICAL descriptor…

19. Jul 2026

Ausgewertete Quellen

• Ubuntu
  USN-9066-1: Linux kernel (HWE) vulnerabilities
• CERT-Bund
  WID-SEC-2026-2403
• NVD
  CVE-2026-63890