CVE-2023-25940 Information

Description

Dell PowerScale OneFS version 9.5.0.0 contains improper link resolution before file access vulnerability in isi_gather_info. A low privilege local attacker could potentially exploit this vulnerability leading to system takeover and it breaks the compliance mode guarantees.

Reference

https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security