In the Linux kernel, the following vulnerability has been resolved:
hfsplus: don't use BUGON() in hfspluscreateattributesfile()
When the volume header contains erroneous values that do not reflect the actual state of the filesystem, hfsplusfillsuper() assumes that the attributes file is not yet created, which later results in hitting BUGON() when hfspluscreateattributesfile() is called. Replace this BUG_ON() with -EIO error with a message to suggest running fsck tool.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9046566fa692f88954dac8c510f37ee17a15fdb7",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "1325647912185204093573489800882180896",
"length": 2810.0
},
"id": "CVE-2025-38712-0477d470",
"signature_type": "Function",
"target": {
"function": "hfsplus_create_attributes_file",
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce5e387f396cbb5c061d9837abcac731e9e06f4d",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "129993581455223314666122366169433619650",
"length": 2749.0
},
"id": "CVE-2025-38712-106d38b0",
"signature_type": "Function",
"target": {
"function": "hfsplus_create_attributes_file",
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c7c6363ca186747ebc2df10c8a1a51e66e0e32d9",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "129993581455223314666122366169433619650",
"length": 2749.0
},
"id": "CVE-2025-38712-330d1856",
"signature_type": "Function",
"target": {
"function": "hfsplus_create_attributes_file",
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c7c6363ca186747ebc2df10c8a1a51e66e0e32d9",
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"337637008272987461766692467184874204434",
"164857410119348318271743488210841190392",
"299857197256906545469360148947087129095",
"220626602264411295320622016003642110814"
]
},
"id": "CVE-2025-38712-43b43311",
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d768e3ed430e89a699bf89d3214dcbbf4648c939",
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"337637008272987461766692467184874204434",
"164857410119348318271743488210841190392",
"299857197256906545469360148947087129095",
"220626602264411295320622016003642110814"
]
},
"id": "CVE-2025-38712-57dc04df",
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce5e387f396cbb5c061d9837abcac731e9e06f4d",
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"337637008272987461766692467184874204434",
"164857410119348318271743488210841190392",
"299857197256906545469360148947087129095",
"220626602264411295320622016003642110814"
]
},
"id": "CVE-2025-38712-7101c252",
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dee5c668ad71ddbcb4b48d95e8a4f371314ad41d",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "129993581455223314666122366169433619650",
"length": 2749.0
},
"id": "CVE-2025-38712-788eb736",
"signature_type": "Function",
"target": {
"function": "hfsplus_create_attributes_file",
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb0eea8e375677f586ad11c12e2525ed3fc698c2",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "1325647912185204093573489800882180896",
"length": 2810.0
},
"id": "CVE-2025-38712-81044ec1",
"signature_type": "Function",
"target": {
"function": "hfsplus_create_attributes_file",
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03cd1db1494cf930e2fa042c9c13e32bffdb4eba",
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"337637008272987461766692467184874204434",
"164857410119348318271743488210841190392",
"299857197256906545469360148947087129095",
"220626602264411295320622016003642110814"
]
},
"id": "CVE-2025-38712-8cc72f74",
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb0eea8e375677f586ad11c12e2525ed3fc698c2",
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"337637008272987461766692467184874204434",
"164857410119348318271743488210841190392",
"299857197256906545469360148947087129095",
"220626602264411295320622016003642110814"
]
},
"id": "CVE-2025-38712-8e771535",
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d768e3ed430e89a699bf89d3214dcbbf4648c939",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "129993581455223314666122366169433619650",
"length": 2749.0
},
"id": "CVE-2025-38712-9027f7f4",
"signature_type": "Function",
"target": {
"function": "hfsplus_create_attributes_file",
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bb8da27ff15e346d4bc9e248e819c9a88ebf9d6",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "129993581455223314666122366169433619650",
"length": 2749.0
},
"id": "CVE-2025-38712-92e51d69",
"signature_type": "Function",
"target": {
"function": "hfsplus_create_attributes_file",
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03cd1db1494cf930e2fa042c9c13e32bffdb4eba",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "129993581455223314666122366169433619650",
"length": 2749.0
},
"id": "CVE-2025-38712-9ba19763",
"signature_type": "Function",
"target": {
"function": "hfsplus_create_attributes_file",
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bb8da27ff15e346d4bc9e248e819c9a88ebf9d6",
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"337637008272987461766692467184874204434",
"164857410119348318271743488210841190392",
"299857197256906545469360148947087129095",
"220626602264411295320622016003642110814"
]
},
"id": "CVE-2025-38712-a524d6cd",
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9046566fa692f88954dac8c510f37ee17a15fdb7",
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"337637008272987461766692467184874204434",
"164857410119348318271743488210841190392",
"299857197256906545469360148947087129095",
"220626602264411295320622016003642110814"
]
},
"id": "CVE-2025-38712-a5e1da77",
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3359392b75395a31af739a761f48f4041148226",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "129993581455223314666122366169433619650",
"length": 2749.0
},
"id": "CVE-2025-38712-c05e4a97",
"signature_type": "Function",
"target": {
"function": "hfsplus_create_attributes_file",
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3359392b75395a31af739a761f48f4041148226",
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"337637008272987461766692467184874204434",
"164857410119348318271743488210841190392",
"299857197256906545469360148947087129095",
"220626602264411295320622016003642110814"
]
},
"id": "CVE-2025-38712-d5ca2cb2",
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/xattr.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dee5c668ad71ddbcb4b48d95e8a4f371314ad41d",
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"337637008272987461766692467184874204434",
"164857410119348318271743488210841190392",
"299857197256906545469360148947087129095",
"220626602264411295320622016003642110814"
]
},
"id": "CVE-2025-38712-efe26080",
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/xattr.c"
}
}
]