CVE-2026-63890

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Reject FIP descriptors with zero fipdlen in CVL walker drivers/scsi/fcoe/fcoectlr.c::fcoectlrrecvclrvlink advanced the descriptor cursor by an attacker-supplied fipdlen without ever requiring dlen = sizeofstruct fipde...

CVE-2026-63890 scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Reject FIP descriptors with zero fipdlen in CVL walker drivers/scsi/fcoe/fcoectlr.c::fcoectlrrecvclrvlink advanced the descriptor cursor by an attacker-supplied fipdlen without ever requiring dlen = sizeofstruct fipde...

PT-2026-61207

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the FCoE Fibre Channel over Ethernet control VLAN walker where the fcoe ctlr recv clr vlink function in drivers/scsi/fcoe/fcoe ctlr.c fails to validate the length of F...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: scsi: fcoe: Fixed the issue where the transport object was not detached when fcoeifinit failed. The fcoeinit function calls fcoetransportattach&fcoeswtransport. However, when fcoeifinit fails, the &fcoeswtransport is not...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Flush destroywork queue before calling bnx2fcinterfaceput The bnx2fcdestroy function removes the interface before calling destroywork. This causes multiple WARNings from sysfsremovegroup, as the controller rport...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004830 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004334 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992400)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992400 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990464)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990464 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: Revert scsi: fcoe: Fix potential deadlock on &fip-ctlrlock This reverts commit...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989336)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989336 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Flush destroywork queue before calling bnx2fcinterfaceput The bnx2fcdestroy functio...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987655)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987655 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Flush destroywork queue before calling bnx2fcinterfaceput The bnx2fcdestroy functio...

EUVD-2019-10174

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2022-50414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls fcoetransportattach&fcoeswtransport, but when fcoeifinit fails, &fcoeswtransport i...

SUSE CVE-2022-50414

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls fcoetransportattach&fcoeswtransport, but when fcoeifinit fails, &fcoeswtransport is not detached and leaves freed &fcoeswtransport on fcoetransports...

CVE-2022-50414

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls fcoetransportattachswtransport, but when fcoeifinit fails, swtransport is not detached and leaves freed swtransport on fcoetransports list. This causes...

DEBIAN-CVE-2022-50414

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls fcoetransportattach&fcoeswtransport, but when fcoeifinit fails, &fcoeswtransport is not detached and leaves freed &fcoeswtransport on fcoetransports...

CVE-2022-50414

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls fcoetransportattach&fcoeswtransport, but when fcoeifinit fails, &fcoeswtransport is not detached and leaves freed &fcoeswtransport on fcoetransports...

UBUNTU-CVE-2022-50414

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls fcoetransportattach&fcoeswtransport, but when fcoeifinit fails, &fcoeswtransport is not detached and leaves freed &fcoeswtransport on fcoetransports...

CVE-2022-50414

CVE-2022-50414 concerns the Linux kernel: during SCSI over FCoE, fcoe_init() calls fcoe_transport_attach(&fcoe_sw_transport). If fcoe_if_init() fails, the transport is not detached, leaving a freed fcoe_sw_transport on the fcoe_transports list. This causes a kernel panic when the module is reinse...

CVE-2022-50414 scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls fcoetransportattach&fcoeswtransport, but when fcoeifinit fails, &fcoeswtransport is not detached and leaves freed &fcoeswtransport on fcoetransports...