CVE-2025-38065

In the Linux kernel, the following vulnerability has been resolved:

orangefs: Do not truncate file size

'len' is used to store the result of i_size_read(), so making 'len' a size_t results in truncation to 4GiB on 32-bit systems.

This vulnerability carries no practical risk for Red Hat Enterprise Linux as the OrangeFS file system is not enabled in supported kernels. Furthermore, the underlying truncation condition is limited to 32-bit architectures when handling file sizes larger than 4 GiB, whereas Red Hat enterprise platforms exclusively deploy 64-bit systems. Consequently, Red Hat products are not impacted by this issue.