Login Sign Up

CVE-2025-38065

5.5 MEDIUM

📋 TL;DR

This CVE describes a file size truncation vulnerability in the Linux kernel's orangefs filesystem module. On 32-bit systems, files larger than 4GiB may be incorrectly truncated when accessed, potentially causing data corruption or loss. Systems using the orangefs filesystem on 32-bit Linux kernels are affected.

💻 Affected Systems

Products:
  • Linux kernel with orangefs module
Versions: Specific affected kernel versions not specified in CVE, but patches exist in stable kernel trees
Operating Systems: Linux distributions using affected kernel versions
Default Config Vulnerable: ✅ No
Notes: Only vulnerable when orangefs filesystem is mounted and used with files >4GiB on 32-bit systems

📦 What is this software?

Debian Linux by Debian

View all CVEs affecting Debian Linux →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Critical files larger than 4GiB become corrupted or inaccessible, leading to data loss, system instability, or service disruption.

🟠

Likely Case

Files exceeding 4GiB on 32-bit systems may be truncated during operations, causing partial data loss or application errors.

🟢

If Mitigated

Minimal impact if systems use 64-bit kernels or don't use orangefs filesystem.

🌐 Internet-Facing: LOW - This is a local filesystem issue requiring local access to exploit.
🏢 Internal Only: MEDIUM - Internal systems using orangefs with large files on 32-bit kernels could experience data corruption.

🎯 Exploit Status

Public PoC: ✅ No
Weaponized: NO
Unauthenticated Exploit: ✅ No
Complexity: LOW

Exploitation requires local access and specific conditions (32-bit system, orangefs usage, large files)

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patches available in stable kernel trees (commits provided in references)

Vendor Advisory: https://git.kernel.org/stable/c/062e8093592fb866b8e016641a8b27feb6ac509d

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from distribution vendor. 2. Rebuild kernel if compiling from source with included patches. 3. Reboot system to load new kernel.

🔧 Temporary Workarounds

Disable orangefs module

linux

Prevent loading of vulnerable orangefs kernel module

echo 'blacklist orangefs' >> /etc/modprobe.d/blacklist.conf
rmmod orangefs

Migrate to 64-bit kernel

linux

Upgrade to 64-bit Linux kernel where truncation doesn't occur

🧯 If You Can't Patch

  • Avoid storing files larger than 4GiB on orangefs filesystems
  • Use alternative filesystems for large file storage

🔍 How to Verify

Check if Vulnerable:

Check if orangefs module is loaded: lsmod | grep orangefs AND check kernel architecture: uname -m

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version includes patched commits or is newer than patched version

📡 Detection & Monitoring

Log Indicators:

  • Kernel logs showing filesystem errors
  • Application logs reporting truncated files or size mismatches

SIEM Query:

source="kernel" AND ("orangefs" OR "filesystem error")

📊 Metadata

CVE ID: CVE-2025-38065
CVSS v3 Score: 5.5 (MEDIUM)
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score: 0.03% exploit probability (8.7th percentile)
Published: June 18, 2025
Last Updated: December 17, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON