Buffer Overflow Vulnerability in Linux Kernel's HFSPlus File System

CVE-2025-40082

What is CVE-2025-40082?

A vulnerability has been identified in the HFSPlus file system within the Linux kernel, specifically pertaining to the hfsplus_uni2asc function. This issue can lead to slab-out-of-bounds read scenarios when processing Unicode attributes. When hfsplus_uni2asc is called, it can pass pointers that exceed allocated memory, resulting in potential memory corruption. Developers have since introduced new wrapper functions to handle Unicode buffers safely, ensuring that string lengths do not surpass designated memory sizes. Users are encouraged to update their systems to mitigate this risk.

References