CNNVD-202510-060 Information
Oct 01, 2025
cve
CNNVD ID
CNNVD-202510-060
Related CVE
- CNNVD Published: 2025-10-01
Description (Chinese)
Storage Performance Development Kit（SPDK）是SPDK社区的一款存储性能开发工具包。该产品主要用于编写高性能、可伸缩的用户模式存储应用程序。 Storage Performance Development Kit（SPDK） 25.05版本存在安全漏洞，该漏洞源于NVMe-oF目标组件存在缓冲区溢出。
Description (English)
Storage Personal Development Kit (SPDK) is a storage performance development toolkit for SPDK communities. The product is used mainly for high-performance, scalable, user-model storage applications. The security loophole in version 25.05 of Storage Personal Development Kit (SPDK) stems from the presence of a buffer zone in target components of NVME-oF.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
SPDK
Published
2025-10-01
Last Modified
2026-02-24
References
https://github.com/spdk/spdk/commit/f786c6d75f5c5162363a621b24f5449c729679c9 https://spdk.io/
Patch
https://github.com/spdk/spdk/releases
Share on: