Slab-Out-Of-Bounds Read Vulnerability in Linux Kernel - CVE-2025-40082
Summary
DEBIAN-CVE-2025-40082: In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0xa71/0xb90 fs/hfsplus/unicode.c:186 Read of... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It supports a wide range of functionalities, including process management, memory management, and file systems. The hfsplus file system, part of the Linux kernel, is designed to handle HFS+ formatted disks, commonly used by macOS. This vulnerability affects the hfsplus module, which is responsible for managing HFS+ file systems, potentially leading to severe security risks.
Vulnerability Detail
CVE-2025-40082 is a slab-out-of-bounds read vulnerability found in the hfsplus module of the Linux kernel. The issue arises in the function hfsplus_uni2asc, where a struct hfsplus_attr_unistr pointer is passed, leading to a read operation that exceeds the allocated memory. This can result in unauthorized access to sensitive data or system crashes. The vulnerability was identified during a kernel address sanitizer (KASAN) check, indicating that the memory access pattern is unsafe and can be exploited by attackers to manipulate system behavior.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the hfsplus file system until the kernel is updated. This can be done by unmounting any HFS+ file systems and ensuring that no applications rely on them during this period.
Conclusion
CVE-2025-40082 is a critical vulnerability in the Linux kernel's hfsplus module that poses significant security risks. Users are urged to update their systems to the latest kernel version to mitigate these risks. Temporary workarounds are available, but the best course of action is to apply the patch as soon as possible.
See every vulnerability recorded for linux →
FAQ
CVE-2025-40082 is a vulnerability in the Linux kernel's hfsplus module that allows for slab-out-of-bounds reads, potentially leading to unauthorized data access.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include potential unauthorized access to sensitive data, system crashes, and exploitation by attackers to manipulate system behavior.
Yes, a patch has been released for the Linux kernel to address CVE-2025-40082. Users should update their kernel to the latest version.
If you cannot update your kernel, it is advisable to unmount any HFS+ file systems and avoid using them until the vulnerability is patched.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
