CVE-2025-40306

CVE-2025-40306 concerns the Linux kernel/orangefs xattr handling. The vulnerability arises from the xattr_key() helper using the pointer variable in the loop condition instead of dereferencing it, causing the loop to continue past valid C strings and potentially walk memory indefinitely. This led...