PT-2025-35989 · Linux +1 · Linux Kernel +1

Published 2025-09-04 · Updated 2025-09-04 · CVE-2025-38716

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions:

Linux kernel (affected versions not specified)

Description:

A general protection fault can occur in the `hfs find init()` function within the Linux kernel's HFS (Hierarchical File System) implementation. This fault is triggered when a tree pointer is NULL, potentially leading to a system crash. The issue is related to reading extents and accessing block data during file system operations.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-38716

Affected Products

Debian

Linux Kernel

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-38716 · Security Note
• https://security-tracker.debian.org/tracker/source-package/linux · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-38716 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38716 · Security Note
• https://git.kernel.org/stable/c/5d8b249527362e0ccafcaf76b3bec2a0d2aa1498 · Note
• https://twitter.com/CVEnew/status/1963637912647672038 · Twitter Post
• https://packages.debian.org/src:linux · Note
• https://git.kernel.org/stable/c/6e20e10064fdc43231636fca519c15c013a8e3d6 · Note
• https://git.kernel.org/stable/c/736a0516a16268995f4898eded49bfef077af709 · Note
• https://git.kernel.org/stable/c/b918c17a1934ac6309b0083f41d4e9d8fb3bb46c · Note
• https://git.kernel.org/stable/c/4f032979b63ad52e08aadf0faeac34ed35133ec0 · Note