Slab Out-of-Bounds Vulnerability in Linux Kernel Affecting HFS

CVE-2025-38715

What is CVE-2025-38715?

A vulnerability in the Linux kernel's handling of HFS has been identified, where improper management of bnode reading can lead to slab out-of-bounds access. The introduced methods is_bnode_offset_valid() and check_and_correct_requested_length() ensure that any requested offsets and lengths are validated before access is attempted. This patch aims to prevent potential crashes and memory corruption, enhancing the overall stability and security of the kernel's HFS functionality.

References