Linux Kernel Vulnerability in HFS+ File System Detected

CVE-2025-38712

What is CVE-2025-38712?

This vulnerability occurs in the Linux kernel's HFS+ file system, where erroneous volume header values can cause the system to misinterpret the state of the filesystem. Specifically, the hfsplus_fill_super() function may incorrectly assume the attributes file is uncreated, leading to an unexpected failure when hfsplus_create_attributes_file() is invoked. To mitigate this issue, the implementation has been corrected to replace the ineffective BUG_ON() directive with an -EIO error code, accompanied by a message advising users to run the fsck tool to check and repair the filesystem.

References