Search: CVE-2025-40082

A slab-out-of-bounds read vulnerability in the Linux kernel's HFS+ filesystem driver (hfsplus_uni2asc function) was fixed. The issue arises because the function processes a unicode buffer pointer beyond allocated memory due to differences in structure sizes. This flaw was addressed by introducing separate wrapper functions to safely handle different unicode buffer structures and limit the length to a safe size.