In the Linux kernel, the following vulnerability has been resolved:
hfsplus: fix slab-out-of-bounds in hfsplusbnoderead()
The hfsplusbnoderead() method can trigger the issue:
[ 174.852007][ T9784] ================================================================== [ 174.852709][ T9784] BUG: KASAN: slab-out-of-bounds in hfsplusbnoderead+0x2f4/0x360 [ 174.853412][ T9784] Read of size 8 at addr ffff88810b5fc6c0 by task repro/9784 [ 174.854059][ T9784] [ 174.854272][ T9784] CPU: 1 UID: 0 PID: 9784 Comm: repro Not tainted 6.16.0-rc3 #7 PREEMPT(full) [ 174.854281][ T9784] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.854286][ T9784] Call Trace: [ 174.854289][ T9784] <TASK> [ 174.854292][ T9784] dumpstacklvl+0x10e/0x1f0 [ 174.854305][ T9784] printreport+0xd0/0x660 [ 174.854315][ T9784] ? virtaddrvalid+0x81/0x610 [ 174.854323][ T9784] ? _physaddr+0xe8/0x180 [ 174.854330][ T9784] ? hfsplusbnoderead+0x2f4/0x360 [ 174.854337][ T9784] kasanreport+0xc6/0x100 [ 174.854346][ T9784] ? hfsplusbnoderead+0x2f4/0x360 [ 174.854354][ T9784] hfsplusbnoderead+0x2f4/0x360 [ 174.854362][ T9784] hfsplusbnodedump+0x2ec/0x380 [ 174.854370][ T9784] ? _pfxhfsplusbnodedump+0x10/0x10 [ 174.854377][ T9784] ? hfsplusbnodewriteu16+0x83/0xb0 [ 174.854385][ T9784] ? srcugpstart+0xd0/0x310 [ 174.854393][ T9784] ? _markinodedirty+0x29e/0xe40 [ 174.854402][ T9784] hfsplusbrecremove+0x3d2/0x4e0 [ 174.854411][ T9784] _hfsplusdeleteattr+0x290/0x3a0 [ 174.854419][ T9784] ? _pfxhfsfind1strecbycnid+0x10/0x10 [ 174.854427][ T9784] ? _pfxhfsplusdeleteattr+0x10/0x10 [ 174.854436][ T9784] ? _asanmemset+0x23/0x50 [ 174.854450][ T9784] hfsplusdeleteallattrs+0x262/0x320 [ 174.854459][ T9784] ? _pfxhfsplusdeleteallattrs+0x10/0x10 [ 174.854469][ T9784] ? rcuiswatching+0x12/0xc0 [ 174.854476][ T9784] ? _markinodedirty+0x29e/0xe40 [ 174.854483][ T9784] hfsplusdeletecat+0x845/0xde0 [ 174.854493][ T9784] ? _pfxhfsplusdeletecat+0x10/0x10 [ 174.854507][ T9784] hfsplusunlink+0x1ca/0x7c0 [ 174.854516][ T9784] ? _pfxhfsplusunlink+0x10/0x10 [ 174.854525][ T9784] ? downwrite+0x148/0x200 [ 174.854532][ T9784] ? _pfxdownwrite+0x10/0x10 [ 174.854540][ T9784] vfsunlink+0x2fe/0x9b0 [ 174.854549][ T9784] dounlinkat+0x490/0x670 [ 174.854557][ T9784] ? _pfxdounlinkat+0x10/0x10 [ 174.854565][ T9784] ? _mightfault+0xbc/0x130 [ 174.854576][ T9784] ? getnameflags.part.0+0x1c5/0x550 [ 174.854584][ T9784] _x64sysunlink+0xc5/0x110 [ 174.854592][ T9784] dosyscall64+0xc9/0x480 [ 174.854600][ T9784] entrySYSCALL64afterhwframe+0x77/0x7f [ 174.854608][ T9784] RIP: 0033:0x7f6fdf4c3167 [ 174.854614][ T9784] Code: f0 ff ff 73 01 c3 48 8b 0d 26 0d 0e 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 08 [ 174.854622][ T9784] RSP: 002b:00007ffcb948bca8 EFLAGS: 00000206 ORIGRAX: 0000000000000057 [ 174.854630][ T9784] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6fdf4c3167 [ 174.854636][ T9784] RDX: 00007ffcb948bcc0 RSI: 00007ffcb948bcc0 RDI: 00007ffcb948bd50 [ 174.854641][ T9784] RBP: 00007ffcb948cd90 R08: 0000000000000001 R09: 00007ffcb948bb40 [ 174.854645][ T9784] R10: 00007f6fdf564fc0 R11: 0000000000000206 R12: 0000561e1bc9c2d0 [ 174.854650][ T9784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.854658][ T9784] </TASK> [ 174.854661][ T9784] [ 174.879281][ T9784] Allocated by task 9784: [ 174.879664][ T9784] kasansavestack+0x20/0x40 [ 174.880082][ T9784] kasansavetrack+0x14/0x30 [ 174.880500][ T9784] _kasankmalloc+0xaa/0xb0 [ 174.880908][ T9784] _kmallocnoprof+0x205/0x550 [ 174.881337][ T9784] _hfsbnodecreate+0x107/0x890 [ 174.881779][ T9784] hfsplusbnodefind+0x2d0/0xd10 [ 174.882222][ T9784] hfsplusbrecfind+0x2b0/0x520 [ 174.882659][ T9784] hfsplusdeleteall_attrs+0x23b/0x3 ---truncated---
[
{
"signature_type": "Function",
"digest": {
"function_hash": "218872042047338124954176626883754490816",
"length": 1203.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@291b7f2538920aa229500dbdd6c5f0927a51bc8b",
"target": {
"function": "hfs_bnode_copy",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-05ace50f"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"187230671237190487294579548745485066227",
"87961418845320751880498424900793242734",
"234367269135438287378621555112494193987",
"196871648331601468643078726937868974512",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"32463572049575451038226714343312486755",
"188329562780848554151585583758527998995",
"311773627695587839416868228280193702246",
"90864138010433007445824349389354026844",
"200895660538158745103063919358846828386",
"29749846977879633882840315554763638388",
"273305628257998461111581521623492083488",
"96356443284431741974240405188949499412"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475d770c19929082aab43337e6c077d0e2043df3",
"target": {
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-0b7cd574"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "19818287126685385499660419664318879382",
"length": 2466.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475d770c19929082aab43337e6c077d0e2043df3",
"target": {
"function": "hfs_bnode_move",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-0ea9e6df"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "214380153659003874150932254194157144985",
"length": 443.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fa4cef8ea13b37811287ef60674c5fd1dd02ee6",
"target": {
"function": "hfs_bnode_clear",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-0fd23251"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"187230671237190487294579548745485066227",
"87961418845320751880498424900793242734",
"234367269135438287378621555112494193987",
"196871648331601468643078726937868974512",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"32463572049575451038226714343312486755",
"188329562780848554151585583758527998995",
"311773627695587839416868228280193702246",
"90864138010433007445824349389354026844",
"200895660538158745103063919358846828386",
"29749846977879633882840315554763638388",
"273305628257998461111581521623492083488",
"96356443284431741974240405188949499412"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@032f7ed6717a4cd3714f9801be39fdfc7f1c7644",
"target": {
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-13e17ddc"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"187230671237190487294579548745485066227",
"87961418845320751880498424900793242734",
"234367269135438287378621555112494193987",
"196871648331601468643078726937868974512",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"32463572049575451038226714343312486755",
"188329562780848554151585583758527998995",
"311773627695587839416868228280193702246",
"90864138010433007445824349389354026844",
"200895660538158745103063919358846828386",
"29749846977879633882840315554763638388",
"273305628257998461111581521623492083488",
"96356443284431741974240405188949499412"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@291b7f2538920aa229500dbdd6c5f0927a51bc8b",
"target": {
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-199504c1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "218872042047338124954176626883754490816",
"length": 1203.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8583d067ae22b7f32ce5277ca5543ac8bf86a3e5",
"target": {
"function": "hfs_bnode_copy",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-1d80c84e"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "189825331324158966279047803923767890939",
"length": 512.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffee8a7bed0fbfe29da239a922b59c5db897c613",
"target": {
"function": "hfs_bnode_read",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-21e3e16a"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"187230671237190487294579548745485066227",
"87961418845320751880498424900793242734",
"234367269135438287378621555112494193987",
"196871648331601468643078726937868974512",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"32463572049575451038226714343312486755",
"188329562780848554151585583758527998995",
"311773627695587839416868228280193702246",
"90864138010433007445824349389354026844",
"200895660538158745103063919358846828386",
"29749846977879633882840315554763638388",
"273305628257998461111581521623492083488",
"96356443284431741974240405188949499412"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ab59229bef6063edf3a6fc2e3e3fd7cd2181b29",
"target": {
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-2f3d3c82"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "218872042047338124954176626883754490816",
"length": 1203.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c80aa2aaaa5e69d5219c6af8ef7e754114bd08d2",
"target": {
"function": "hfs_bnode_copy",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-31c16e04"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "214380153659003874150932254194157144985",
"length": 443.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475d770c19929082aab43337e6c077d0e2043df3",
"target": {
"function": "hfs_bnode_clear",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-35c84c30"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "189825331324158966279047803923767890939",
"length": 512.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@032f7ed6717a4cd3714f9801be39fdfc7f1c7644",
"target": {
"function": "hfs_bnode_read",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-3d44db2c"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "336864010023150744732757714585870461675",
"length": 448.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fa4cef8ea13b37811287ef60674c5fd1dd02ee6",
"target": {
"function": "hfs_bnode_read",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-3e07ea60"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "285137227199089405877662250375182309611",
"length": 515.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ab59229bef6063edf3a6fc2e3e3fd7cd2181b29",
"target": {
"function": "hfs_bnode_clear",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-47c95afe"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "218872042047338124954176626883754490816",
"length": 1203.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475d770c19929082aab43337e6c077d0e2043df3",
"target": {
"function": "hfs_bnode_copy",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-51e26c7a"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "32894327756829160007384505673714090402",
"length": 554.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffee8a7bed0fbfe29da239a922b59c5db897c613",
"target": {
"function": "hfs_bnode_write",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-53669efe"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "336864010023150744732757714585870461675",
"length": 448.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@291b7f2538920aa229500dbdd6c5f0927a51bc8b",
"target": {
"function": "hfs_bnode_read",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-593a8ef5"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "246520620186713710767443020138171753386",
"length": 1335.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffee8a7bed0fbfe29da239a922b59c5db897c613",
"target": {
"function": "hfs_bnode_copy",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-5a748f5e"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "191069415005848746273977394988894582979",
"length": 2416.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ab59229bef6063edf3a6fc2e3e3fd7cd2181b29",
"target": {
"function": "hfs_bnode_move",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-5b999a9e"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"187230671237190487294579548745485066227",
"87961418845320751880498424900793242734",
"234367269135438287378621555112494193987",
"196871648331601468643078726937868974512",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"32463572049575451038226714343312486755",
"188329562780848554151585583758527998995",
"311773627695587839416868228280193702246",
"90864138010433007445824349389354026844",
"200895660538158745103063919358846828386",
"29749846977879633882840315554763638388",
"273305628257998461111581521623492083488",
"96356443284431741974240405188949499412"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffee8a7bed0fbfe29da239a922b59c5db897c613",
"target": {
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-5d3ae709"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "191069415005848746273977394988894582979",
"length": 2416.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffee8a7bed0fbfe29da239a922b59c5db897c613",
"target": {
"function": "hfs_bnode_move",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-642bdd99"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"187230671237190487294579548745485066227",
"87961418845320751880498424900793242734",
"234367269135438287378621555112494193987",
"196871648331601468643078726937868974512",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"32463572049575451038226714343312486755",
"188329562780848554151585583758527998995",
"311773627695587839416868228280193702246",
"90864138010433007445824349389354026844",
"200895660538158745103063919358846828386",
"29749846977879633882840315554763638388",
"273305628257998461111581521623492083488",
"96356443284431741974240405188949499412"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fa4cef8ea13b37811287ef60674c5fd1dd02ee6",
"target": {
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-68769b3c"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "32894327756829160007384505673714090402",
"length": 554.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ab59229bef6063edf3a6fc2e3e3fd7cd2181b29",
"target": {
"function": "hfs_bnode_write",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-7ca54773"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"187230671237190487294579548745485066227",
"87961418845320751880498424900793242734",
"234367269135438287378621555112494193987",
"196871648331601468643078726937868974512",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"32463572049575451038226714343312486755",
"188329562780848554151585583758527998995",
"311773627695587839416868228280193702246",
"90864138010433007445824349389354026844",
"200895660538158745103063919358846828386",
"29749846977879633882840315554763638388",
"273305628257998461111581521623492083488",
"96356443284431741974240405188949499412"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c80aa2aaaa5e69d5219c6af8ef7e754114bd08d2",
"target": {
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-7f424d3a"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"187230671237190487294579548745485066227",
"87961418845320751880498424900793242734",
"234367269135438287378621555112494193987",
"196871648331601468643078726937868974512",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"32463572049575451038226714343312486755",
"188329562780848554151585583758527998995",
"311773627695587839416868228280193702246",
"90864138010433007445824349389354026844",
"200895660538158745103063919358846828386",
"29749846977879633882840315554763638388",
"273305628257998461111581521623492083488",
"96356443284431741974240405188949499412"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2abd574d2fe22b8464cf6df5abb6f24d809eac0",
"target": {
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-7fac4108"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "285137227199089405877662250375182309611",
"length": 515.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffee8a7bed0fbfe29da239a922b59c5db897c613",
"target": {
"function": "hfs_bnode_clear",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-89bd11d4"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257645107768463363706547323072222363332",
"length": 490.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fa4cef8ea13b37811287ef60674c5fd1dd02ee6",
"target": {
"function": "hfs_bnode_write",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-8ae7dc6f"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "336864010023150744732757714585870461675",
"length": 448.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2abd574d2fe22b8464cf6df5abb6f24d809eac0",
"target": {
"function": "hfs_bnode_read",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-9245a930"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257645107768463363706547323072222363332",
"length": 490.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c80aa2aaaa5e69d5219c6af8ef7e754114bd08d2",
"target": {
"function": "hfs_bnode_write",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-9b704e1b"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "246520620186713710767443020138171753386",
"length": 1335.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ab59229bef6063edf3a6fc2e3e3fd7cd2181b29",
"target": {
"function": "hfs_bnode_copy",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-9e3fc2c5"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "285137227199089405877662250375182309611",
"length": 515.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@032f7ed6717a4cd3714f9801be39fdfc7f1c7644",
"target": {
"function": "hfs_bnode_clear",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-a36a21fd"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "19818287126685385499660419664318879382",
"length": 2466.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fa4cef8ea13b37811287ef60674c5fd1dd02ee6",
"target": {
"function": "hfs_bnode_move",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-a883d3bd"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "191069415005848746273977394988894582979",
"length": 2416.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@032f7ed6717a4cd3714f9801be39fdfc7f1c7644",
"target": {
"function": "hfs_bnode_move",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-abede41b"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "214380153659003874150932254194157144985",
"length": 443.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8583d067ae22b7f32ce5277ca5543ac8bf86a3e5",
"target": {
"function": "hfs_bnode_clear",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-ace1ed33"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257645107768463363706547323072222363332",
"length": 490.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@291b7f2538920aa229500dbdd6c5f0927a51bc8b",
"target": {
"function": "hfs_bnode_write",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-aeba4a17"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "218872042047338124954176626883754490816",
"length": 1203.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fa4cef8ea13b37811287ef60674c5fd1dd02ee6",
"target": {
"function": "hfs_bnode_copy",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-b7ee01d0"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "218872042047338124954176626883754490816",
"length": 1203.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2abd574d2fe22b8464cf6df5abb6f24d809eac0",
"target": {
"function": "hfs_bnode_copy",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-bb5048bd"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "19818287126685385499660419664318879382",
"length": 2466.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8583d067ae22b7f32ce5277ca5543ac8bf86a3e5",
"target": {
"function": "hfs_bnode_move",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-bd999e8c"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "336864010023150744732757714585870461675",
"length": 448.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8583d067ae22b7f32ce5277ca5543ac8bf86a3e5",
"target": {
"function": "hfs_bnode_read",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-c51963cc"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "214380153659003874150932254194157144985",
"length": 443.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2abd574d2fe22b8464cf6df5abb6f24d809eac0",
"target": {
"function": "hfs_bnode_clear",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-c58664a5"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "19818287126685385499660419664318879382",
"length": 2466.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2abd574d2fe22b8464cf6df5abb6f24d809eac0",
"target": {
"function": "hfs_bnode_move",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-ceb8d9df"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257645107768463363706547323072222363332",
"length": 490.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8583d067ae22b7f32ce5277ca5543ac8bf86a3e5",
"target": {
"function": "hfs_bnode_write",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-d7268b9d"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "246520620186713710767443020138171753386",
"length": 1335.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@032f7ed6717a4cd3714f9801be39fdfc7f1c7644",
"target": {
"function": "hfs_bnode_copy",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-d74300f7"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "19818287126685385499660419664318879382",
"length": 2466.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@291b7f2538920aa229500dbdd6c5f0927a51bc8b",
"target": {
"function": "hfs_bnode_move",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-de4d4ec4"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "189825331324158966279047803923767890939",
"length": 512.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ab59229bef6063edf3a6fc2e3e3fd7cd2181b29",
"target": {
"function": "hfs_bnode_read",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-de99ccc6"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"187230671237190487294579548745485066227",
"87961418845320751880498424900793242734",
"234367269135438287378621555112494193987",
"196871648331601468643078726937868974512",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"221324323963955932504818365097408935273",
"92741077172202374879792197323149263782",
"306283565808738490282518183446456945032",
"32463572049575451038226714343312486755",
"188329562780848554151585583758527998995",
"311773627695587839416868228280193702246",
"90864138010433007445824349389354026844",
"200895660538158745103063919358846828386",
"29749846977879633882840315554763638388",
"273305628257998461111581521623492083488",
"96356443284431741974240405188949499412"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8583d067ae22b7f32ce5277ca5543ac8bf86a3e5",
"target": {
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-e0939f3d"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "19818287126685385499660419664318879382",
"length": 2466.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c80aa2aaaa5e69d5219c6af8ef7e754114bd08d2",
"target": {
"function": "hfs_bnode_move",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-eabebd33"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "32894327756829160007384505673714090402",
"length": 554.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@032f7ed6717a4cd3714f9801be39fdfc7f1c7644",
"target": {
"function": "hfs_bnode_write",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-eccd0fa5"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257645107768463363706547323072222363332",
"length": 490.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475d770c19929082aab43337e6c077d0e2043df3",
"target": {
"function": "hfs_bnode_write",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-ed1d3ee0"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "214380153659003874150932254194157144985",
"length": 443.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c80aa2aaaa5e69d5219c6af8ef7e754114bd08d2",
"target": {
"function": "hfs_bnode_clear",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-ed4c7619"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "214380153659003874150932254194157144985",
"length": 443.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@291b7f2538920aa229500dbdd6c5f0927a51bc8b",
"target": {
"function": "hfs_bnode_clear",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-f25e706c"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "336864010023150744732757714585870461675",
"length": 448.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c80aa2aaaa5e69d5219c6af8ef7e754114bd08d2",
"target": {
"function": "hfs_bnode_read",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-f40ba255"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "336864010023150744732757714585870461675",
"length": 448.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475d770c19929082aab43337e6c077d0e2043df3",
"target": {
"function": "hfs_bnode_read",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-f7c956b4"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "257645107768463363706547323072222363332",
"length": 490.0
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2abd574d2fe22b8464cf6df5abb6f24d809eac0",
"target": {
"function": "hfs_bnode_write",
"file": "fs/hfsplus/bnode.c"
},
"id": "CVE-2025-38714-fd47ea03"
}
]