Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS contains a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. This affects versions 9.5.0.0 through 9.5.1.5, 9.6.0.0 through 9.7.1.10, 9.8.0.0 through 9.10.1.3, and versions starting from 9.11.0.0 and prior to 9.13.0.0. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to denial of service.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.5 | CVE-2026-22281 |
Exploitation
To exploit this vulnerability, an attacker with low privileges and adjacent network access can manipulate the timing of operations to create a race condition. This could allow the attacker to disrupt service availability, potentially leading to a denial of service for legitimate users.
Affected Products
- PowerScale OneFS versions 9.5.0.0 through 9.5.1.5
- PowerScale OneFS versions 9.6.0.0 through 9.7.1.10
- PowerScale OneFS versions 9.8.0.0 through 9.10.1.3
- PowerScale OneFS versions starting from 9.11.0.0 and prior to 9.13.0.0
Mitigation
To mitigate this vulnerability, users should update their PowerScale OneFS to the latest version that addresses the TOCTOU race condition. Regularly applying security updates and patches is essential to protect against potential exploits.