CVE-2025-38714

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() The hfsplus_bnode_read() method can trigger the issue: [ 174.852007][ T9784] ================================================================== [ 174.852709][ T9784] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0x2f4/0x360 [ 174.853412][ T9784] Read of size 8 at addr ffff88810b5fc6c0 by task repro/9784 [ 174.854059][ T9784] [ 174.854272][ T9784] CPU: 1 UID: 0 PID: 9784 Comm: repro Not tainted 6.16.0-rc3 #7 PREEMPT(full) [ 174.854281][ T9784] Hardware name: QEMU...

Affected product and versions

Product

Linux Linux, SIMATIC CN 4100, linux kernel

Affected versions

>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 032f7ed6717a4cd3714f9801be39fdfc7f1c7644, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ffee8a7bed0fbfe29da239a922b59c5db897c613, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 5ab59229bef6063edf3a6fc2e3e3fd7cd2181b29, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a2abd574d2fe22b8464cf6df5abb6f24d809eac0, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8583d067ae22b7f32ce5277ca5543ac8bf86a3e5, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 475d770c19929082aab43337e6c077d0e2043df3, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 291b7f2538920aa229500dbdd6c5f0927a51bc8b, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 7fa4cef8ea13b37811287ef60674c5fd1dd02ee6, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c80aa2aaaa5e69d5219c6af8ef7e754114bd08d2, >= 2.6.12, < V5.0, >= 2.6.13 < 5.4.297, >= 5.5 < 5.10.241, >= 5.11 < 5.15.190, >= 5.16 < 6.1.149, >= 6.2 < 6.6.103, >= 6.7 < 6.12.43, >= 6.13 < 6.15.11, >= 6.16 < 6.16.2, 2.6.12

Fixed versions

5.4.297, 5.10.241, 5.15.190, 6.1.149, 6.6.103, 6.12.43, 6.15.11, 6.16.2

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-125