Out-of-Bounds Read Vulnerability in OrangeFS by Linux Kernel
CVE-2025-21782
Summary
A vulnerability identified in the OrangeFS within the Linux kernel leads to a slab-out-of-bounds read in the orangefs_debug_write function. This flaw can occur when input data exceeds the allocated buffer size, potentially allowing an attacker to access sensitive information or cause a denial of service. Multiple patches have been suggested and tested to address this issue, ensuring improved stability and security of the affected systems. Users are advised to apply the latest updates to safeguard against this vulnerability.
Affected Version(s)
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1da2697307dad281dd690a19441b5ca4af92d786
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2b84a231910cef2e0a16d29294afabfb69112087
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 897f496b946fdcfab5983c983e4b513ab6682364
References
Timeline
Vulnerability published
Vulnerability Reserved