Slab Out-of-Bounds Vulnerability in Linux Kernel's HFSPlus Module

CVE-2025-38714

What is CVE-2025-38714?

A vulnerability has been identified in the HFSPlus module of the Linux Kernel, specifically within the hfsplus_bnode_read function. This issue could lead to a slab out-of-bounds condition, potentially allowing an attacker to read memory outside the intended boundaries, which could result in data leakage or corruption. The failure occurs during the processing of bnodes, specifically when reading data structures. Developers are urged to apply patches that address this flaw to uphold the integrity and security of systems running the affected kernel versions.

References