File Size Truncation Issue in OrangeFS from Linux Kernel

CVE-2025-38065

What is CVE-2025-38065?

A file size truncation vulnerability exists in OrangeFS due to improper handling of the 'len' variable, used to store file sizes read from i_size_read(). On 32-bit systems, this can improperly limit the file size to 4GiB, leading to potential data integrity issues. Users are encouraged to update their systems to ensure proper handling of file sizes and avoid unexpected truncation.

References