cve/2025/CVE-2025-38715.md
2025-09-29 21:09:30 +02:00

1.1 KiB

CVE-2025-38715

Description

In the Linux kernel, the following vulnerability has been resolved:hfs: fix slab-out-of-bounds in hfs_bnode_read()This patch introduces is_bnode_offset_valid() method that checksthe requested offset value. Also, it introducescheck_and_correct_requested_length() method that checks andcorrect the requested length (if it is necessary). These methodsare used in hfs_bnode_read(), hfs_bnode_write(), hfs_bnode_clear(),hfs_bnode_copy(), and hfs_bnode_move() with the goal to preventthe access out of allocated memory and triggering the crash.

POC

Reference

No PoCs from references.

Github