In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32<\/p>\n
An adjacent Fibre Channel fabric actor that can deliver an FPIN ELS
\nframe to an lpfc or qla2xxx Linux initiator can trigger a non-return in
\nthe generic FC transport. This is not a local userspace or IP network
\npath; the attacker must be able to inject fabric traffic, for example as
\na compromised switch or fabric controller, or as a same-zone N_Port on a
\nfabric that permits source spoofing.<\/p>\n
The Link-Integrity and Peer-Congestion FPIN walkers used a u8 loop
\ncounter against the 32-bit on-wire pname_count field, and did not bound
\npname_count by the descriptor body already validated by the TLV walker.
\nA pname_count of 256 therefore wraps the counter and keeps the loop
\ncondition true indefinitely.<\/p>\n
Factor the shared pname_list[] walk into one helper, widen the counter
\nto u32, and clamp pname_count against the entries that fit in the
\ndescriptor body before iterating.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32<\/p>\n
An adjacent Fibre Channel fabric actor that can deliver an FPIN EL<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-14943","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/14943","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14943"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14943"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14943"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}