CVE-2025-21782 Details
Description
In the Linux kernel, the following vulnerability has been resolved: orangefs: fix a oob in orangefs_debug_write I got a syzbot report: slab-out-of-bounds Read in orangefs_debug_write... several people suggested fixes, I tested Al Viro's suggestion and made this patch.
A slab-out-of-bounds read vulnerability has been identified in the OrangeFS implementation within the Linux kernel. This issue arises in the 'orangefs_debug_write' function, where improper handling of data can lead to memory access violations.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/09d472a18c0ee1d5b83612cb919e33a1610fea16 | kernel.org | |
| https://git.kernel.org/stable/c/18b7f841109f697840fe8633cf7ed7d32bd3f91b | kernel.org | |
| https://git.kernel.org/stable/c/1c5244299241cf49d8ae7b5054e299cc8faa4e09 | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/1da2697307dad281dd690a19441b5ca4af92d786 | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/2b84a231910cef2e0a16d29294afabfb69112087 | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/8725882b0f691f8113b230aea9df0256030a63a6 | kernel.org | |
| https://git.kernel.org/stable/c/897f496b946fdcfab5983c983e4b513ab6682364 | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/f7c848431632598ff9bce57a659db6af60d75b39 | kernel.org | Mailing ListPatch |
| https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html | CVE | |
| https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html | CVE |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | < 6.1.129 >= 6.2, < 6.6.79 >= 6.7, < 6.12.16 >= 6.13, < 6.13.4 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 3, 2025 | CVE Modified | CVE |
| Nov 3, 2025 | CVE Modified | CVE |
| Mar 13, 2025 | CVE Modified | kernel.org |
| Mar 5, 2025 | Initial Analysis | [email protected] |
| Feb 27, 2025 | New CVE Received | kernel.org |