01 Record

CVE-2025-21782

orangefs: fix a oob in orangefs_debug_write

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

orangefs: fix a oob in orangefs_debug_write

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.25% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 16.8% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-02-27 02:18Z1 YR AGO

Last updated

2026-05-11 21:06Z3 MO AGO

Reserved

2024-12-29

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

0c61683a09504f2caf12419198956d874ce2fd6df32977a498b3eee249d58977

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 18b7f841109f697840fe8633cf7ed7d32bd3f91b, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 09d472a18c0ee1d5b83612cb919e33a1610fea16, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 8725882b0f691f8113b230aea9df0256030a63a6, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 1da2697307dad281dd690a19441b5ca4af92d786, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 2b84a231910cef2e0a16d29294afabfb69112087, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 897f496b946fdcfab5983c983e4b513ab6682364, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < 1c5244299241cf49d8ae7b5054e299cc8faa4e09, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to < f7c848431632598ff9bce57a659db6af60d75b39, 4.6—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/18b7f841109f697840fe8633cf7ed7d32bd3f91b
git.kernel.orghttps://git.kernel.org/stable/c/09d472a18c0ee1d5b83612cb919e33a1610fea16
git.kernel.orghttps://git.kernel.org/stable/c/8725882b0f691f8113b230aea9df0256030a63a6
git.kernel.orghttps://git.kernel.org/stable/c/1da2697307dad281dd690a19441b5ca4af92d786
git.kernel.orghttps://git.kernel.org/stable/c/2b84a231910cef2e0a16d29294afabfb69112087
git.kernel.orghttps://git.kernel.org/stable/c/897f496b946fdcfab5983c983e4b513ab6682364
git.kernel.orghttps://git.kernel.org/stable/c/1c5244299241cf49d8ae7b5054e299cc8faa4e09
git.kernel.orghttps://git.kernel.org/stable/c/f7c848431632598ff9bce57a659db6af60d75b39
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00028.html

01 Record index

CVE-2025-21782

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-21782

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References