Slab Out-of-Bounds Read Vulnerability in Linux Kernel HFS Plus Module

CVE-2025-40088

What is CVE-2025-40088?

A vulnerability exists in the Linux kernel's handling of HFS Plus file systems, specifically in the hfsplus_strcasecmp function, which can lead to a slab out-of-bounds read. This issue is triggered under certain conditions during string comparisons, potentially allowing an attacker to read sensitive memory content. Prompt updates and patches are recommended to mitigate this risk.

References