CVE-2026-72033: orangefs: keep the readdir entry size 64-bit in fill_from_part()
In the Linux kernel, the following vulnerability has been resolved:
orangefs: keep the readdir entry size 64-bit in fillfrompart()
fillfrompart() computes the size of a directory entry in sizet but stores it in a u32. An entry length near U32MAX wraps it to a small value, bypasses the bounds check, and is then used to index the entry, reading far past the directory part -- an out-of-bounds read that oopses the kernel.
Compute the size as a u64 so it cannot truncate; the bounds check then rejects the entry. The trailer is supplied by the userspace client.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72033?
CVE-2026-72033 has a risk rating of 44, indicating a significant security concern.
How do I fix CVE-2026-72033?
To fix CVE-2026-72033, you should update your Linux Kernel to the latest stable version where the vulnerability has been addressed.
What systems are affected by CVE-2026-72033?
CVE-2026-72033 affects the Linux Kernel, particularly versions that use the OrangeFS module.
What happens if CVE-2026-72033 is exploited?
Exploitation of CVE-2026-72033 could allow an attacker to manipulate directory entry sizes, potentially leading to data corruption or denial of service.
When was CVE-2026-72033 published?
CVE-2026-72033 was published on August 15, 2026.