CVE-2025-40088 | Linux Kernel up to 6.17.4 hfsplus hfsplus_strcasecmp out-of-bounds

October 30, 2025 Yanac

A vulnerability has been found in Linux Kernel up to 6.17.4 and classified as critical. This issue affects the function hfsplus_strcasecmp of the component hfsplus. Performing manipulation results in out-of-bounds read.

This vulnerability was named CVE-2025-40088. The attack needs to be approached within the local network. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More