CVE-2025-38713 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affecting hfsplus File System Released Three vulnerabilities affecting the hfsplus file system have been published, including CVE-2024-56548, CVE-2025-68767, and CVE-2025-68774. The vulnerabilities address issues such as inode mode verification and missing function calls, which could impact system stability and data integrity. Affected systems include those utilizing the hfsplus file system. 7 sources 47