Impact
The vulnerability describes a Time‑of‑check Time‑of‑use race condition that allows a low‑privileged attacker with adjacent network access to cause service interruption on Dell PowerScale OneFS. The race condition does not provide direct access to data or application logic; it can result in a denial of service for clients using affected file system operations.
Affected Systems
Dell PowerScale OneFS products with versions 9.5.0.0 through 9.5.1.5, 9.6.0.0 through 9.7.1.10, 9.8.0.0 through 9.10.1.3, and 9.11.0.0 up to but not including 9.13.0.0 are vulnerable.
Risk and Exploitability
The CVSS score of 3.5 indicates low severity, and the EPSS score of less than 1% indicates a very low probability of exploitation. The vulnerability is not listed in CISA KEV. The attack vector is a low‑privileged user who can interact with the network segment that hosts the storage cluster; the race condition may be triggered by concurrent operations on the file system, potentially causing service disruption.
OpenCVE Enrichment