NetSight
IP …
high7.8

CVE-2025-38065

In the Linux kernel, the following vulnerability has been resolved: orangefs: Do not truncate file size 'len' is used to store the result of i_size_read(), so …

Impact

In the Linux kernel, the following vulnerability has been resolved: orangefs: Do not truncate file size 'len' is used to store the result of i_size_read(), so making 'len' a size_t results in truncation to 4GiB on 32-bit systems.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.6 before 5.4.294
from 5.5 before 5.10.238
from 5.11 before 5.15.185
from 5.16 before 6.1.141
from 6.2 before 6.6.93
from 6.7 before 6.12.31
DebianDebian Linux
Version 11.0

References