The vulnerability in the Linux kernel's OrangeFS arises from the function orangefs_prepare_cdm_array() which sizes each client debug keyword buffer using strcspn() without skipping leading spaces, but then parses the keyword with sscanf() using %s, which skips leading whitespace. This discrepancy allows a client debug entry starting with a space to cause the allocation to be sized for an empty keyword while sscanf() copies a non-empty token, resulting in a write past the end of the allocated buffer. The fix involves skipping leading spaces before computing the keyword length to ensure the allocation matches the parsed string.

This vulnerability can lead to a buffer overflow condition in the OrangeFS client debug mask parsing, which may cause memory corruption. The specific impact depends on how the overflow is exploited, but it could potentially lead to denial of service or other unintended behavior in the kernel component handling OrangeFS debug masks.

The vulnerability has been resolved by adjusting the code to skip leading spaces before computing the keyword length, ensuring the buffer allocation matches the parsed string. Users should apply the official Linux kernel patch that addresses this issue once available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.