DSA-2026-100: Security Update for Dell PowerScale OneFS Multiple Third-Party Component Vulnerabilities
Resumen: Dell PowerScale OneFS remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Este artículo se aplica a
Este artículo no se aplica a
Este artículo no está vinculado a ningún producto específico.
No se identifican todas las versiones del producto en este artículo.
Impacto
High
Detalles
| Third-Party Component | CVEs | More information |
| Dell PowerEdge Server BIOS | CVE-2024-42446, CVE-2025-30513, CVE-2025-31944, CVE-2025-32007, CVE-2025-32467, CVE-2025-27572, CVE-2025-27940, CVE-2025-22885, CVE-2024-38798, CVE-2025-31648, CVE-2025-29088 | DSA-2025-370, DSA-2026-027, DSA-2026-011, DSA-2026-012, DSA-2026-040 |
| iDRAC 9 | CVE-2026-79940 | DSA-2026-374 |
Corrección y productos afectados
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| CVE-2024-42446, CVE-2025-30513, CVE-2025-31944, CVE-2025-32007, CVE-2025-32467, CVE-2025-27572, CVE-2025-27940, CVE-2025-29088, CVE-2025-22885, CVE-2024-38798, CVE-2025-31648 | PowerScale F210 | PowerScale Node Firmware Package | Versions prior to 13.2.2 | Version 13.2.2 or later | PowerScale OneFS Downloads Area |
| CVE-2024-42446, CVE-2025-30513, CVE-2025-31944, CVE-2025-32007, CVE-2025-32467, CVE-2025-27572, CVE-2025-27940, CVE-2025-29088, CVE-2025-22885, CVE-2024-38798, CVE-2025-31648 | PowerScale F710 | PowerScale Node Firmware Package | Versions prior to 13.2.2 | Version 13.2.2 or later | PowerScale OneFS Downloads Area |
| CVE-2024-42446, CVE-2025-30513, CVE-2025-31944, CVE-2025-32007, CVE-2025-32467, CVE-2025-27572, CVE-2025-27940, CVE-2025-29088, CVE-2025-22885, CVE-2024-38798, CVE-2025-31648 | PowerScale F910 | PowerScale Node Firmware Package | Versions prior to 13.2.2 | Version 13.2.2 or later | PowerScale OneFS Downloads Area |
| CVE-2024-42446, CVE-2025-30513, CVE-2025-31944, CVE-2025-32007, CVE-2025-32467, CVE-2025-27572, CVE-2025-27940, CVE-2025-29088, CVE-2025-22885, CVE-2024-38798, CVE-2025-31648 | PowerScale PA110 | PowerScale Node Firmware Package | Versions prior to 13.2.2 | Version 13.2.2 or later | PowerScale OneFS Downloads Area |
| CVE-2026-79940 | PowerScale B100 |
PowerScale Node Firmware Package |
Versions prior to 13.2.2 |
Version 13.2.2 or later |
PowerScale OneFS Downloads Area |
| CVE-2026-79940 | PowerScale F200 |
PowerScale Node Firmware Package |
Versions prior to 13.2.2 |
Version 13.2.2 or later |
PowerScale OneFS Downloads Area |
| CVE-2026-79940 | PowerScale F600 |
PowerScale Node Firmware Package |
Versions prior to 13.2.2 |
Version 13.2.2 or later |
PowerScale OneFS Downloads Area |
| CVE-2026-79940 | PowerScale F900 |
PowerScale Node Firmware Package |
Versions prior to 13.2.2 |
Version 13.2.2 or later |
PowerScale OneFS Downloads Area |
| CVE-2026-79940 | PowerScale P100 |
PowerScale Node Firmware Package |
Versions prior to 13.2.2 |
Version 13.2.2 or later |
PowerScale OneFS Downloads Area |
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| CVE-2024-42446, CVE-2025-30513, CVE-2025-31944, CVE-2025-32007, CVE-2025-32467, CVE-2025-27572, CVE-2025-27940, CVE-2025-29088, CVE-2025-22885, CVE-2024-38798, CVE-2025-31648 | PowerScale F210 | PowerScale Node Firmware Package | Versions prior to 13.2.2 | Version 13.2.2 or later | PowerScale OneFS Downloads Area |
| CVE-2024-42446, CVE-2025-30513, CVE-2025-31944, CVE-2025-32007, CVE-2025-32467, CVE-2025-27572, CVE-2025-27940, CVE-2025-29088, CVE-2025-22885, CVE-2024-38798, CVE-2025-31648 | PowerScale F710 | PowerScale Node Firmware Package | Versions prior to 13.2.2 | Version 13.2.2 or later | PowerScale OneFS Downloads Area |
| CVE-2024-42446, CVE-2025-30513, CVE-2025-31944, CVE-2025-32007, CVE-2025-32467, CVE-2025-27572, CVE-2025-27940, CVE-2025-29088, CVE-2025-22885, CVE-2024-38798, CVE-2025-31648 | PowerScale F910 | PowerScale Node Firmware Package | Versions prior to 13.2.2 | Version 13.2.2 or later | PowerScale OneFS Downloads Area |
| CVE-2024-42446, CVE-2025-30513, CVE-2025-31944, CVE-2025-32007, CVE-2025-32467, CVE-2025-27572, CVE-2025-27940, CVE-2025-29088, CVE-2025-22885, CVE-2024-38798, CVE-2025-31648 | PowerScale PA110 | PowerScale Node Firmware Package | Versions prior to 13.2.2 | Version 13.2.2 or later | PowerScale OneFS Downloads Area |
| CVE-2026-79940 | PowerScale B100 |
PowerScale Node Firmware Package |
Versions prior to 13.2.2 |
Version 13.2.2 or later |
PowerScale OneFS Downloads Area |
| CVE-2026-79940 | PowerScale F200 |
PowerScale Node Firmware Package |
Versions prior to 13.2.2 |
Version 13.2.2 or later |
PowerScale OneFS Downloads Area |
| CVE-2026-79940 | PowerScale F600 |
PowerScale Node Firmware Package |
Versions prior to 13.2.2 |
Version 13.2.2 or later |
PowerScale OneFS Downloads Area |
| CVE-2026-79940 | PowerScale F900 |
PowerScale Node Firmware Package |
Versions prior to 13.2.2 |
Version 13.2.2 or later |
PowerScale OneFS Downloads Area |
| CVE-2026-79940 | PowerScale P100 |
PowerScale Node Firmware Package |
Versions prior to 13.2.2 |
Version 13.2.2 or later |
PowerScale OneFS Downloads Area |
Notes:
- We encourage all customers to upgrade to the remediated versions. If an upgrade is not feasible, customers should review the CVE details to determine potential risk to their environments.
- To identify which nodes require upgrading, please refer to the firmware assessment report. For instructions on completing the assessment and report, please refer to the "Run a firmware assessment" section in PowerScale Node Firmware Package 13.2.2 Release Notes documented in Firmware - PowerScale Info Hub.
- Due to the NFP installation issue with parallel upgrade, customers are advised not to perform parallel upgrades on version prior to 9.9.0.0.
Soluciones alternativas y mitigaciones
None
Historial de revisiones
| Revision | Date | Description |
| 1.0 | 2026-03-02 | Initial Release |
| 2.0 | 2026-04-28 | Major update: added CVE-2024-38798 |
| 3.0 | 2026-08-03 | Added details for CVE-2025-29088 |
| 4.0 | 2026-08-31 | Added details for CVE-2026-79940 |
Información relacionada
Descargo de responsabilidad
Productos afectados
PowerScale, PowerScale OneFS, PowerScale F210, PowerScale F710, PowerScale F910, PowerScale PA110Propiedades del artículo
Número del artículo: 000434554
Tipo de artículo: Dell Security Advisory
Última modificación: 31 ago 2026
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.