AZL-75306
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-75306.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-75306
- Upstream
- Published
- 2025-09-04T16:15:40Z
- Modified
- 2026-04-01T05:22:50.434261Z
- Summary
- CVE-2025-38712 affecting package kernel for versions less than 5.15.200.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
hfsplus: don't use BUGON() in hfspluscreateattributesfile()
When the volume header contains erroneous values that do not reflect the actual state of the filesystem, hfsplusfillsuper() assumes that the attributes file is not yet created, which later results in hitting BUGON() when hfspluscreateattributesfile() is called. Replace this BUG_ON() with -EIO error with a message to suggest running fsck tool.
- References