kernel: orangefs: fix out-of-bounds fsid access
No data.
No data.
No data.
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-5747-1 | linux security update |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
No EPSS score available.
Key SSVC decision points have not yet been added.
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In the Linux kernel, the following vulnerability has been resolved: orangefs: fix out-of-bounds fsid access Arnd Bergmann sent a patch to fsdevel, he says: "orangefs_statfs() copies two consecutive fields of the superblock into the statfs structure, which triggers a warning from the string fortification helpers" Jan Kara suggested an alternate way to do the patch to make it more readable. I ran both ideas through xfstests and both seem fine. This patch is based on Jan Kara's suggestion. | This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| Title | orangefs: fix out-of-bounds fsid access | kernel: orangefs: fix out-of-bounds fsid access |
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-125 | |
| Metrics |
cvssV3_1
|
cvssV3_1
|
No data.