CVE-2024-42143

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

The vulnerability of the orangefs_mount() function of the orangefs file system in Linux kernels allows a hacker to induce a service failure.

The vulnerability of the orangefsmount function in the fs/orangefs/super.c file of the orangefs file system in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

GSD-2023-1001602 orangefs: Fix sysfs not cleanup when dev init failed

orangefs: Fix sysfs not cleanup when dev init failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001543 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()

orangefs: Fix kmemleak in orangefspreparedebugfshelpstring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001406 orangefs: Fix sysfs not cleanup when dev init failed

orangefs: Fix sysfs not cleanup when dev init failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001304 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()

orangefs: Fix kmemleak in orangefspreparedebugfshelpstring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001303 orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()

orangefs: Fix kmemleak in orangefskernel,clientdebuginit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001093 orangefs: Fix sysfs not cleanup when dev init failed

orangefs: Fix sysfs not cleanup when dev init failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000962 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()

orangefs: Fix kmemleak in orangefspreparedebugfshelpstring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000961 orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()

orangefs: Fix kmemleak in orangefskernel,clientdebuginit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000682 orangefs: Fix sysfs not cleanup when dev init failed

orangefs: Fix sysfs not cleanup when dev init failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000515 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()

orangefs: Fix kmemleak in orangefspreparedebugfshelpstring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000514 orangefs: Fix kmemleak in orangefs_sysfs_init()

orangefs: Fix kmemleak in orangefssysfsinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000513 orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()

orangefs: Fix kmemleak in orangefskernel,clientdebuginit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33591 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a kmemleak in the orangefs sysfs init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2023-34380 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to a kmemleak in the orangefs kernel debug init and orangefs client debug init functions. The actual impact and attack plausibility have not yet been proven...

PT-2025-37618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak within the orangefs sysfs init function when the orangefs module is inserted and removed. This results in unreferenced kobjects leaking memory. Th...

AZL-38200 CVE-2019-11358 affecting package orangefs for versions less than 2.9.7-7

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , ... because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype...

AZL-38437 CVE-2010-4756 affecting package orangefs 2.9.8-3

The glob implementation in the GNU C Library aka glibc or libc6 allows remote authenticated users to cause a denial of service CPU and memory consumption via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a differen...