CVE-2026-89497

Received Received - Intake

Buffer Overflow in OrangeFS Kernel Module

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefs_prepare_cdm_array() sizes each client debug keyword buffer with strcspn(cds_head, " "), but then parses the keyword with %s. The %s conversion skips leading whitespace, while strcspn() does not. If a client debug entry starts with a space, the allocation can be sized for an empty keyword while sscanf() copies the following non-empty token. This can write past the end of the allocated keyword buffer. Skip leading spaces before computing the keyword length so the allocation matches the string parsed by sscanf().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-89497

EUVD

EUVD-2026-76403

Affected Vendors & Products

Vendor	Product	Version / Range
orangefs	orangefs	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves incorrect handling of client debug masks in the OrangeFS filesystem. The issue occurs when parsing debug keywords that start with spaces. The function orangefs_prepare_cdm_array() calculates buffer size using strcspn() which counts spaces, but sscanf() skips leading spaces during parsing. This mismatch can cause the buffer to be too small, leading to out-of-bounds writes when copying the keyword.

Detection Guidance

This vulnerability is specific to the Linux kernel's OrangeFS filesystem component. Detection requires checking if your system uses OrangeFS and inspecting kernel logs or filesystem configurations for malformed client debug entries. No direct commands are provided in the context, but monitoring kernel logs for filesystem errors or unusual buffer overflow warnings may indicate exploitation attempts.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code or cause a denial of service by triggering buffer overflows. Systems using OrangeFS with debug features enabled may be vulnerable to crashes or unauthorized access if malicious input is processed.

Mitigation Strategies

Apply the Linux kernel patch that resolves this issue. If using OrangeFS, update to the patched version. Monitor filesystem logs for suspicious activity and restrict untrusted access to OrangeFS debug configurations. Disable debug features if not required.

Hi! I’m here to help you understand CVE-2026-89497. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70