NetSight
IP …
medium5.5

CVE-2025-38712

In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When the volume header cont…

Impact

In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When the volume header contains erroneous values that do not reflect the actual state of the filesystem, hfsplus_fill_super() assumes that the attributes file is not yet created, which later results in hitting BUG_ON() when hfsplus_create_attributes_file() is called. Replace this BUG_ON() with -EIO error with a message to suggest running fsck tool.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.13 before 5.4.297
from 5.5 before 5.10.241
from 5.11 before 5.15.190
from 5.16 before 6.1.149
from 6.2 before 6.6.103
from 6.7 before 6.12.43
DebianDebian Linux
Version 11.0

Weakness classification

CWE-617

References