← All advisories

Medium severity5.5OSV Advisory· Published Oct 1, 2025· Updated Apr 15, 2026

CVE-2025-57275

CVE-2025-57275

Description

Storage Performance Development Kit (SPDK) 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
spdkPyPI	< 25.9	25.9

Affected products

8

Spdk/SpdkOSV
Range: v1.0.0, v1.2.0, v16.06, …
osv-coords7 versions
pkg:apk/chainguard/longhorn-spdk pkg:apk/chainguard/longhorn-spdk-binaries pkg:apk/chainguard/longhorn-spdk-compat pkg:apk/chainguard/longhorn-spdk-dev pkg:apk/chainguard/longhorn-spdk-examples pkg:apk/chainguard/longhorn-spdk-libs pkg:pypi/spdk
< 25.09.0.1-r0+ 6 more
- (no CPE)range: < 25.09.0.1-r0
- (no CPE)range: < 25.09.0.1-r0
- (no CPE)range: < 25.09.0.1-r0
- (no CPE)range: < 25.09.0.1-r0
- (no CPE)range: < 25.09.0.1-r0
- (no CPE)range: < 25.09.0.1-r0
- (no CPE)range: < 25.9

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-5m5w-w2h2-fqgqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-57275ghsaADVISORY
github.com/spdk/spdk/commit/8981ddb1ccaf54f85d34482a5a644e075b58cb36ghsaWEB
github.com/spdk/spdk/commit/f786c6d75f5c5162363a621b24f5449c729679c9nvdWEB
spdk.ioghsaWEB
spdk.ionvd

News mentions

0

No linked articles in our index yet.