CVE-2025-38713

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() The hfsplus_readdir() method is capable to crash by calling hfsplus_uni2asc(): [ 667.121659][ T9805] ================================================================== [ 667.122651][ T9805] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x902/0xa10 [ 667.123627][ T9805] Read of size 2 at addr ffff88802592f40c by task repro/9805 [ 667.124578][ T9805] [ 667.124876][ T9805] CPU: 3 UID: 0 PID: 9805 Comm: repro Not tainted 6.16.0-rc3 #1 PREEMPT(full) [ 667.124886][ T98...

Affected product and versions

Product

Linux Linux, SIMATIC CN 4100, linux kernel

Affected versions

>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 73f7da507d787b489761a0fa280716f84fa32b2f, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 76a4c6636a69d69409aa253b049b1be717a539c5, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ccf0ad56a779e6704c0b27f555dec847f50c7557, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 13604b1d7e7b125fb428cddbec6b8d92baad25d5, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 291bb5d931c6f3cd7227b913302a17be21cf53b0, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f7534cbfac0a9ffa4fa17cacc6e8b6446dae24ee, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6f93694bcbc2c2ab3e01cd8fba2f296faf34e6b9, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1ca69007e52a73bd8b84b988b61b319816ca8b01, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 94458781aee6045bd3d0ad4b80b02886b9e2219b, >= 2.6.12, < V5.0, >= 2.6.12.1 < 5.4.297, >= 5.5 < 5.10.241, >= 5.11 < 5.15.190, >= 5.16 < 6.1.149, >= 6.2 < 6.6.103, >= 6.7 < 6.12.43, >= 6.13 < 6.15.11, >= 6.16 < 6.16.2, 2.6.12

Fixed versions

5.4.297, 5.10.241, 5.15.190, 6.1.149, 6.6.103, 6.12.43, 6.15.11, 6.16.2

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-125