CVE-2026-72033

Received Received - Intake

Integer Overflow in OrangeFS Kernel Module Leads to Out-of-Bounds Read

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fill_from_part() fill_from_part() computes the size of a directory entry in size_t but stores it in a __u32. An entry length near U32_MAX wraps it to a small value, bypasses the bounds check, and is then used to index the entry, reading far past the directory part -- an out-of-bounds read that oopses the kernel. Compute the size as a u64 so it cannot truncate; the bounds check then rejects the entry. The trailer is supplied by the userspace client.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72033

EUVD

EUVD-2026-58991

Affected Vendors & Products

Vendor	Product	Version / Range
orangefs	orangefs	*
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability where the fill_from_part() function incorrectly stores a directory entry size as a 32-bit value (__u32) instead of a 64-bit value. When the entry size is near the maximum 32-bit value, it wraps around to a small number, bypassing security checks and causing an out-of-bounds read in kernel memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's orangefs module and involves an out-of-bounds read due to incorrect size handling. Detection requires checking the kernel version and orangefs module for affected code. Use commands like 'uname -a' to check kernel version and 'lsmod | grep orangefs' to verify if the module is loaded. Inspect kernel logs for oopses or crashes.

Impact Analysis

This vulnerability could allow an attacker with local access to cause a kernel crash (oops) by exploiting a maliciously crafted directory entry. This may lead to denial-of-service conditions on affected systems running the vulnerable Linux kernel with OrangeFS.

Compliance Impact

This vulnerability is a kernel out-of-bounds read in OrangeFS, which could lead to kernel crashes or memory corruption. It does not directly impact data confidentiality or integrity but may cause system instability. Compliance impact depends on whether such instability could lead to unauthorized data access or processing disruptions, which may violate GDPR or HIPAA requirements for availability and security.

Mitigation Strategies

Immediately update the Linux kernel to a patched version that resolves this issue. Disable the orangefs module if not in use. Monitor kernel logs for signs of exploitation or crashes. Apply vendor-supplied patches as soon as they become available.

Hi! I’m here to help you understand CVE-2026-72033. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70