CVE-2025-38714
BaseFortify
Publication date: 2025-09-04
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | kernel | 6.16.0-rc3 |
| linux | kernel | 5.10.244-1 |
| linux | kernel | 6.1.153-1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a slab-out-of-bounds error in the Linux kernel's hfsplus file system driver, specifically in the hfsplus_bnode_read() function. It occurs when the function reads beyond the allocated memory boundary, which can lead to memory corruption or crashes.
How can this vulnerability impact me? :
The impact of this vulnerability could include system instability, crashes, or potential exploitation by attackers to execute arbitrary code or cause denial of service due to memory corruption in the kernel.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring the system logs for KASAN (Kernel Address Sanitizer) slab-out-of-bounds errors related to hfsplus_bnode_read(). You can check the kernel logs using commands like 'dmesg | grep -i kasan' or 'journalctl -k | grep -i kasan' to look for messages similar to the provided bug report indicating slab-out-of-bounds in hfsplus_bnode_read().
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include updating the Linux kernel to a version where this vulnerability is fixed, as the issue has been resolved in the kernel. Until then, avoid using the hfsplus filesystem or accessing hfsplus volumes if possible, to prevent triggering the vulnerable code path.