AZL-66866
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66866.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-66866
- Upstream
- Published
- 2025-09-04T16:15:40Z
- Modified
- 2026-04-01T05:21:04Z
- Summary
- CVE-2025-38712 affecting package kernel for versions less than 6.6.104.2-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
When the volume header contains erroneous values that do not reflect the actual state of the filesystem, hfsplus_fill_super() assumes that the attributes file is not yet created, which later results in hitting BUG_ON() when hfsplus_create_attributes_file() is called. Replace this BUG_ON() with -EIO error with a message to suggest running fsck tool.
- References