Concurrency Issue in Linux Kernel's hfsplus Filesystem
CVE-2025-38650

Currently unrated

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
22 August 2025

What is CVE-2025-38650?

The hfsplus filesystem of the Linux kernel has a concurrency-related issue that arises during operations such as file truncation and attribute changes. These operations can lead to multiple threads attempting to lock a shared extents tree concurrently, resulting in unexpected warnings. The implemented fix aims to avoid potential deadlock scenarios during file operations by ensuring that the check for locked extents is appropriately handled. If the extree is locked by one thread while another attempts to perform actions on it, this can trigger abnormal behavior and subject the system to unnecessary warnings.

Affected Version(s)

Linux 31651c607151f1034cfb57e5a78678bea54c362b

Linux 31651c607151f1034cfb57e5a78678bea54c362b < 084933961ecda7561dedfb78c4676ccb90c91ada

Linux 31651c607151f1034cfb57e5a78678bea54c362b < 5055b7db94110f228961dea6b74eed0a93a50b01

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-38650 : Concurrency Issue in Linux Kernel's hfsplus Filesystem