Uninitialized Value Vulnerability in Linux Kernel's HFS+ File System by Linux Foundation

CVE-2025-40244

What is CVE-2025-40244?

The vulnerability in the Linux kernel's HFS+ file system arises from an uninitialized value issue in the __hfsplus_ext_cache_extent function. This flaw can potentially lead to a kernel panic state, rendering the system unresponsive while trying to execute file-write operations. The issue was reported by syzbot and has been resolved in subsequent kernel updates. System administrators are advised to update their Linux kernel to prevent exploitation of this vulnerability.

References