CVE-2025-40243

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-syzkaller

Description The Linux kernel had an uninitialized value issue within the hfs find set zero bits() function, specifically related to the HFS filesystem. The issue was identified by syzbot and involved the potential for memory allocated via kmalloc() to contain garbage data, which could lead to incorrect bitmap operations and potentially file system corruption. The fix involves changing the memory allocation function from kmalloc() to kzalloc(), which guarantees that the allocated memory is initialized to zero.

Recommendations Update to Linux kernel version 6.16.0-syzkaller or later.