CVE-2025-38714: hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
Published Sep 4, 2025
·Updated
hfsplus: fix slab-out-of-bounds in hfsplusbnoderead()
Affected Software
17 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.96.2-2
Microsoft azl3 kernel 6.6.96.2-1
Linux Linux kernel>=2.6.13<5.4.297
Linux Linux kernel>=5.5<5.10.241
Linux Linux kernel>=5.11<5.15.190
Linux Linux kernel>=5.16<6.1.149
Linux Linux kernel>=6.2<6.6.103
Linux Linux kernel>=6.7<6.12.43
Linux Linux kernel>=6.13<6.15.11
Linux Linux kernel>=6.16<6.16.2
Linux Linux kernel=2.6.12
Linux Linux kernel=2.6.12-rc2
Linux Linux kernel=2.6.12-rc3
Linux Linux kernel=2.6.12-rc4
Linux Linux kernel=2.6.12-rc5
Debian Debian Linux=11.0
Event History
Sep 4, 2025
CVE Published
via MITRE·03:33 PM
Data Sourced
via MITRE·03:33 PM
DescriptionSeverity
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 6, 2025
Data Sourced
via Microsoft·01:05 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·01:05 AM
SeverityAffected Software
Updated
via Microsoft·08:05 AM
DescriptionSeverity
Updated
via Microsoft·08:05 AM
SeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-38714?
CVE-2025-38714 is classified as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2025-38714?
To fix CVE-2025-38714, upgrade your Linux kernel to a version where the vulnerability has been patched.
3
What impact does CVE-2025-38714 have on my system?
CVE-2025-38714 can lead to unauthorized access and manipulation of system memory, potentially compromising system integrity.
4
Is CVE-2025-38714 present in all Linux kernel versions?
CVE-2025-38714 affects specific versions of the Linux kernel that utilize the hfsplus file system.
5
How can I determine if my Linux kernel is affected by CVE-2025-38714?
Check your Linux kernel version and refer to security advisories to see if it includes CVE-2025-38714.