Riskcovery

CVE-2025-21782

orangefs: fix a oob in orangefs_debug_write

State
Published
Severity
Not scored
Published
Feb 27, 2025
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

orangefs: fix a oob in orangefs_debug_write

I got a syzbot report: slab-out-of-bounds Read in orangefs_debug_write... several people suggested fixes, I tested Al Viro's suggestion and made this patch.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 18b7f841109f697840fe8633cf7ed7d32bd3f91bAffected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 09d472a18c0ee1d5b83612cb919e33a1610fea16Affected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 8725882b0f691f8113b230aea9df0256030a63a6Affected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 1da2697307dad281dd690a19441b5ca4af92d786Affected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 2b84a231910cef2e0a16d29294afabfb69112087Affected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 897f496b946fdcfab5983c983e4b513ab6682364Affected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 1c5244299241cf49d8ae7b5054e299cc8faa4e09Affected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before f7c848431632598ff9bce57a659db6af60d75b39Affected
LinuxLinux
  • 4.6Affected
  • before 4.6Not affected
  • 5.4.291 through 5.4.*Not affected
  • 5.10.235 through 5.10.*Not affected
  • 5.15.179 through 5.15.*Not affected
  • 6.1.129 through 6.1.*Not affected
  • 6.6.79 through 6.6.*Not affected
  • 6.12.16 through 6.12.*Not affected
  • 6.13.4 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.