Slab-Out-Of-Bounds Read in Linux Kernel's hfsplus Module

CVE-2025-38713

What is CVE-2025-38713?

A vulnerability exists in the hfsplus module of the Linux kernel that can lead to a slab-out-of-bounds read condition within the hfsplus_uni2asc() function. This flaw arises during the execution of the hfsplus_readdir() method, where improper handling of memory leads to possible crashes. If exploited, it can allow unauthorized access to memory locations, potentially causing system instability and data corruption. Addressing this issue is vital to maintain system integrity and reliability.

References