CVE-2025-40088

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc6

Description The Linux kernel contains a flaw in the hfsplus strcasecmp() function that can lead to a slab-out-of-bounds read. The issue is related to the logic within hfsplus strcasecmp(). This can result in a kernel crash. The call trace indicates the issue occurs during a file system operation.

Recommendations Update to a newer version of the Linux kernel that contains a fix for this vulnerability.