PT-2025-44378 · Linux+4 · Linux Kernel+4

Published 2025-09-19 · Updated 2026-05-07 · CVE-2025-40088

Positive Technologies (AI Summary)

CVSS v2.0

4.5

Medium

Base vector

AV:L/AC:H/Au:S/C:P/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc6

Description The Linux kernel contains a flaw in the hfsplus strcasecmp() function that can lead to a slab-out-of-bounds read. The issue is related to the logic within hfsplus strcasecmp(). This can result in a kernel crash. The call trace indicates the issue occurs during a file system operation.

Recommendations Update to a newer version of the Linux kernel that contains a fix for this vulnerability.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-02778

CVE-2025-40088

DLA-4379-1

DLA-4404-1

DSA-6053-1

ECHO-53B2-A784-2496

MGASA-2025-0309

MGASA-2025-0310

OESA-2025-2765

OESA-2025-2766

OESA-2025-2767

OPENSUSE-SU-2025:15702-1

OPENSUSE-SU-2026:10301-1

SUSE-SU-2025:21040-1

SUSE-SU-2025:21052-1

SUSE-SU-2025:21056-1

SUSE-SU-2025:21064-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4111-1

SUSE-SU-2025:4128-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4140-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4189-1

SUSE-SU-2025:4301-1

SUSE-SU-2026:0473-1

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8033-1

USN-8033-2

USN-8033-3

USN-8033-4

USN-8033-5

USN-8033-6

USN-8033-7

USN-8033-8

USN-8034-1

USN-8034-2

USN-8048-1

USN-8095-1

USN-8095-2

USN-8095-3

USN-8095-4

USN-8095-5

USN-8100-1

USN-8125-1

USN-8126-1

USN-8141-1

USN-8163-1

USN-8163-2

USN-8165-1

USN-8243-1

USN-8261-1

Affected Products

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 3558

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40088.json · Exploit
• https://ubuntu.com/security/CVE-2025-38055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21833 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39788 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38251 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38543 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8030-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0309.html · Security Note
• https://ubuntu.com/security/CVE-2026-23026 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40284 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37844 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68264 · Vendor Advisory