A vulnerability in the Linux kernel SCSI transport layer permits an adjacent attacker to cause a denial of service by sending specifically crafted Fibre Channel frames.

The issue resides in the scsi_transport_fc module, where the FPIN (Fabric Performance Impact Notification) pname walker counter uses insufficient bit depth. An adjacent attacker can deliver a malicious FPIN ELS frame, causing the counter to overflow and trigger a non-return loop in the kernel.

Successful exploitation leads to a system hang or denial of service, impacting the availability of storage services reliant on Fibre Channel connectivity. Given the CVSS score of 8.1, this represents a significant risk to high-availability storage environments and enterprise-grade server infrastructure.

Immediate Action: Apply the latest stable kernel updates, specifically ensuring versions 5.15.210, 6.1.176, or 6.6.143 are deployed.

Proactive Monitoring: Monitor Fibre Channel fabric logs for malformed or unexpected ELS frames and observe system responsiveness during high storage traffic periods.

Compensating Controls: Isolate Fibre Channel networks and ensure only trusted devices can interact with the initiator, reducing the likelihood of malicious frame injection.

Public Exploit Available: No

Organizations operating Fibre Channel storage arrays must prioritize applying the provided kernel patches. This update is critical to preventing potential denial of service attacks that could disrupt vital storage operations and enterprise data availability.