CVE-2025-40082: linux kernel from 5.4.297 (inclusive), before 5.5 (exclusive), from 5.10.241 (inclusive), before 5.11 (exclusive)…

Affected technology

linux kernel · from 5.4.297 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.241 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.15.190 (inclusive), before 5.15.200 (exclusive)
linux

linux kernel · from 6.1.149 (inclusive), before 6.1.163 (exclusive)
linux

linux kernel · from 6.6.103 (inclusive), before 6.6.124 (exclusive)
linux

linux kernel · from 6.12.43 (inclusive), before 6.12.70 (exclusive)
linux

linux kernel · from 6.15.11 (inclusive), before 6.16 (exclusive)
linux

linux kernel · from 6.16.2 (inclusive), before 6.17.3 (exclusive)
linux

Linux · ccf0ad56a779e6704c0b27f555dec847f50c7557 to before 343fe375a8dd6ee51a193a1c233b999f5ea4d479, 13604b1d7e7b125fb428cddbec6b8d92baad25d5 to before 782acde47e127c98a113726e2ff8024bd65c0454, 291bb5d931c6f3cd7227b913302a17be21cf53b0 to before c3db89ea1ed3d540eebe8f3c36e806fb75ee4a1e, f7534cbfac0a9ffa4fa17cacc6e8b6446dae24ee to before 5b5228964619b180f366940505b77255b1a03929, 94458781aee6045bd3d0ad4b80b02886b9e2219b to before 857aefc70d4ae3b9bf1ae67434d27d0f79f80c9e, 94458781aee6045bd3d0ad4b80b02886b9e2219b to before bea3e1d4467bcf292c8e54f080353d556d355e26, 73f7da507d787b489761a0fa280716f84fa32b2f, 76a4c6636a69d69409aa253b049b1be717a539c5, 6f93694bcbc2c2ab3e01cd8fba2f296faf34e6b9, 1ca69007e52a73bd8b84b988b61b319816ca8b01, 5.15.190 to before 5.15.200, 6.1.149 to before 6.1.163, 6.6.103 to before 6.6.124, 6.12.43 to before 6.12.70, 5.4.297 to before 5.5, 5.10.241 to before 5.11, 6.15.11 to before 6.16, 6.16.2 to before 6.17
Linux

Linux · 6.17
Linux

Component: Not specified by the source
File: fs/hfsplus/dir.c, fs/hfsplus/hfsplus_fs.h, fs/hfsplus/unicode.c, fs/hfsplus/xattr.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.