Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38065

orangefs: Do not truncate file size

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: orangefs: Do not truncate file size 'len' is used to store the result of i_size_read(), so making 'len' a size_t results in truncation to 4GiB on 32-bit systems.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < ceaf195ed285b77791e29016ee6344b3ded609b3affected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 341e3a5984cf5761f3dab16029d7e9fb1641d5ffaffected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 5111227d7f1f57f6804666b3abf780a23f44fc1daffected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 15602508ad2f923e228b9521960b4addcd27d9c4affected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 121f0335d91e46369bf55b5da4167d82b099a166affected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < cd918ec24168fe08c6aafc077dd3b6d88364c5cfaffected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 2323b806221e6268a4e17711bc72e2fc87c191a3affected
  • f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 062e8093592fb866b8e016641a8b27feb6ac509daffected

Linux Linux

Default version status: affected

  • 4.6affected
  • 0 to < 4.6unaffected
  • 5.4.294 to ≤ 5.4.*unaffected
  • 5.10.238 to ≤ 5.10.*unaffected
  • 5.15.185 to ≤ 5.15.*unaffected
  • 6.1.141 to ≤ 6.1.*unaffected
  • 6.6.93 to ≤ 6.6.*unaffected
  • 6.12.31 to ≤ 6.12.*unaffected
  • 6.14.9 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References