https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 16:45:52 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89497 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>orangefs: skip leading spaces before parsing client debug masks</p> <p>orangefs_prepare_cdm_array() sizes each client debug keyword buffer with strcspn(cds_head, &#34; &#34;), but then parses the keyword with %s. The %s conversion skips leading whitespace, while strcspn() does not.</p> <p>If a client debug entry starts with a space, the allocation can be sized for an empty keyword while sscanf() copies the following non-empty token. This can write past the end of the allocated keyword buffer.</p> <p>Skip leading spaces before computing the keyword length so the allocation matches the string parsed by sscanf().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>orangefs: skip leading spaces before parsing client debug masks</p> <p>orangefs_prepare_cdm_array() sizes each client debug keyword buffer with strcspn(cds_head, &#34; &#34;), but then parses the keyword with %s. The %s conversion skips leading whitespace, while strcspn() does not.</p> <p>If a client debug entry starts with a space, the allocation can be sized for an empty keyword while sscanf() copies the following non-empty token. This can write past the end of the allocated keyword buffer.</p> <p>Skip leading spaces before computing the keyword length so the allocation matches the string parsed by sscanf().</p> https://vulnerability.circl.lu/vuln/cve-2026-89497