CVE-2025-37782 - Vulnerability Details

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

Advisories

Source	ID	Title
Debian DLA	DLA-4178-1	linux security update
Debian DLA	DLA-4193-1	linux-6.1 security update
EUVD	EUVD-2025-13035	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://lore.kernel.org/linux-cve-announce/2025050117-CVE-2025-37782-7cc2@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-37782
https://www.cve.org/CVERecord?id=CVE-2025-37782

History

Wed, 18 Jun 2025 16:00:00 +0000

Type	Values Removed	Values Added
Metrics	threat_severity `Moderate`	threat_severity `None`

Wed, 04 Jun 2025 16:00:00 +0000

Type	Values Removed	Values Added
References	https://git.kernel.org/stable/c/0296f9733543c7c8e666e69da743cfffd32dd805 https://git.kernel.org/stable/c/8060afd77761eac2048db12fb0510d76ce0cf1f3 https://git.kernel.org/stable/c/84e8719c087e68c967975b78e67be54f697c957f https://git.kernel.org/stable/c/9c93fb4ad8d3b730afe1a09949ebbea64d4f60eb https://git.kernel.org/stable/c/9f77aa584a659b21211a794e53522e6fb16d4a16 https://git.kernel.org/stable/c/a33c035df01d1e008874607da74bf7cf45152f47 https://git.kernel.org/stable/c/bb5e07cb927724e0b47be371fa081141cfb14414 https://git.kernel.org/stable/c/f6651c04191d49907d40f0891bbe51ef9703c792

Wed, 04 Jun 2025 10:45:00 +0000

Type	Values Removed	Values Added
Description	In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key Syzbot reported an issue in hfs subsystem: BUG: KASAN: slab-out-of-bounds in memcpy_from_page include/linux/highmem.h:423 [inline] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read fs/hfs/bnode.c:35 [inline] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x314/0x450 fs/hfs/bnode.c:70 Write of size 94 at addr ffff8880123cd100 by task syz-executor237/5102 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189 __asan_memcpy+0x40/0x70 mm/kasan/shadow.c:106 memcpy_from_page include/linux/highmem.h:423 [inline] hfs_bnode_read fs/hfs/bnode.c:35 [inline] hfs_bnode_read_key+0x314/0x450 fs/hfs/bnode.c:70 hfs_brec_insert+0x7f3/0xbd0 fs/hfs/brec.c:159 hfs_cat_create+0x41d/0xa50 fs/hfs/catalog.c:118 hfs_mkdir+0x6c/0xe0 fs/hfs/dir.c:232 vfs_mkdir+0x2f9/0x4f0 fs/namei.c:4257 do_mkdirat+0x264/0x3a0 fs/namei.c:4280 __do_sys_mkdir fs/namei.c:4300 [inline] __se_sys_mkdir fs/namei.c:4298 [inline] __x64_sys_mkdir+0x6c/0x80 fs/namei.c:4298 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbdd6057a99 Add a check for key length in hfs_bnode_read_key to prevent out-of-bounds memory access. If the key length is invalid, the key buffer is cleared, improving stability and reliability.	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Title	hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key	kernel: hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key

Fri, 02 May 2025 14:45:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025050117-CVE-2025-37782-7cc2@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2025-37782 https://www.cve.org/CVERecord?id=CVE-2025-37782
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Fri, 02 May 2025 06:30:00 +0000

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/8060afd77761eac2048db12fb0510d76ce0cf1f3 https://git.kernel.org/stable/c/a33c035df01d1e008874607da74bf7cf45152f47 https://git.kernel.org/stable/c/f6651c04191d49907d40f0891bbe51ef9703c792

Thu, 01 May 2025 13:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key Syzbot reported an issue in hfs subsystem: BUG: KASAN: slab-out-of-bounds in memcpy_from_page include/linux/highmem.h:423 [inline] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read fs/hfs/bnode.c:35 [inline] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x314/0x450 fs/hfs/bnode.c:70 Write of size 94 at addr ffff8880123cd100 by task syz-executor237/5102 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189 __asan_memcpy+0x40/0x70 mm/kasan/shadow.c:106 memcpy_from_page include/linux/highmem.h:423 [inline] hfs_bnode_read fs/hfs/bnode.c:35 [inline] hfs_bnode_read_key+0x314/0x450 fs/hfs/bnode.c:70 hfs_brec_insert+0x7f3/0xbd0 fs/hfs/brec.c:159 hfs_cat_create+0x41d/0xa50 fs/hfs/catalog.c:118 hfs_mkdir+0x6c/0xe0 fs/hfs/dir.c:232 vfs_mkdir+0x2f9/0x4f0 fs/namei.c:4257 do_mkdirat+0x264/0x3a0 fs/namei.c:4280 __do_sys_mkdir fs/namei.c:4300 [inline] __se_sys_mkdir fs/namei.c:4298 [inline] __x64_sys_mkdir+0x6c/0x80 fs/namei.c:4298 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbdd6057a99 Add a check for key length in hfs_bnode_read_key to prevent out-of-bounds memory access. If the key length is invalid, the key buffer is cleared, improving stability and reliability.
Title		hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
References		https://git.kernel.org/stable/c/0296f9733543c7c8e666e69da743cfffd32dd805 https://git.kernel.org/stable/c/84e8719c087e68c967975b78e67be54f697c957f https://git.kernel.org/stable/c/9c93fb4ad8d3b730afe1a09949ebbea64d4f60eb https://git.kernel.org/stable/c/9f77aa584a659b21211a794e53522e6fb16d4a16 https://git.kernel.org/stable/c/bb5e07cb927724e0b47be371fa081141cfb14414

Projects

Sign in to view the affected projects.

MITRE

Status: REJECTED

Assigner: Linux

Published: 2025-05-01T13:07:18.993Z

Updated: 2025-06-04T10:21:51.883Z

Reserved: 2025-04-16T04:51:23.940Z

Link: CVE-2025-37782

Vulnrichment

No data.

NVD

Status : Rejected

Published: 2025-05-01T14:15:42.163

Modified: 2025-06-04T11:15:21.673

Link: CVE-2025-37782

Redhat

Severity :

Publid Date: 2025-05-01T00:00:00Z

Links: CVE-2025-37782 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Affected Vendors & Products

Projects

JSON object

JSON object

JSON object

JSON object

JSON object