Threats tagged 'ghsa-38x9-7hc9-22jf'

A high severity vulnerability (CVE-2025-40244) in the Linux kernel's HFS+ filesystem driver was identified and resolved. The issue involved an uninitialized value detected by Kernel Memory Sanitizer (KMSAN) in the __hfsplus_ext_cache_extent() function, which could lead to kernel panic and potentially allow an attacker with local privileges to cause denial of service or escalate privileges. The vulnerability was reported by syzbot and fixed in kernel versions after 6.12.0-rc5. No known exploits are reported in the wild.