The Linux kernel contained a vulnerability in the scsi_transport_fc component where the FPIN pname walker used a u8 loop counter against a 32-bit pname_count field without proper bounds checking. This allowed an attacker controlling adjacent Fibre Channel fabric traffic to trigger an infinite loop (non-return) in the generic FC transport by delivering an FPIN ELS frame with a crafted pname_count of 256, causing the counter to wrap and the loop condition to remain true indefinitely. The fix involved consolidating the pname_list walk into a single helper, widening the loop counter to u32, and clamping pname_count to the validated descriptor body size before iteration.

An attacker capable of injecting Fibre Channel fabric traffic could cause a denial of service by triggering an infinite loop in the Linux kernel's FC transport layer, potentially impacting system stability. This is not exploitable via local userspace or IP network paths and requires privileged network conditions such as compromised fabric components or source spoofing within the same fabric zone.

A fix has been implemented in the Linux kernel to address this vulnerability by widening the FPIN pname walker counter and adding proper bounds checking. Users should update to the fixed Linux kernel version once available. Since this is not a cloud service, remediation depends on applying the official kernel patch. Patch status is not yet confirmed in this data; check the vendor advisory for current remediation guidance.