CVE-2025-40243 describes an uninitialized value vulnerability in the Linux kernel's HFS filesystem driver, specifically within the hfs_find_set_zero_bits() function. This flaw arises because kmalloc() allocates memory without clearing it, potentially leading to "garbage" data affecting bitmap operations and causing volume corruption. While no CVSS score is provided, the FAUCET Risk Score is low at 7/100, indicating a limited severity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 2.6.12CNA affecteddefault affected | |
| Linux | Linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 2048ec5b98dbdfe0b929d2e42dc7a54c389c53dd, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 2a112cdd66f5a132da5235ca31a320528c86bf33, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 3b447fd401824e1ccf0b769188edefe866a1e676, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 502fa92a71f344611101bd04ef1a595b8b6014f5, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < bf1683078fbdd09a7f7f9b74121ebaa03432bd00, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < cfafefcb0e1fc60135f7040f4aed0a4aef4f76ca, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < e148ed5cda8fd96d4620c4622fb02f552a2d166a, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < fc56548fca732f3d3692c83b40db796259a03887CNA affecteddefault unaffected |
CVSS data has not been published for this CVE.
No social media mentions found for this CVE.
Linux kernel (Xilinx) vulnerabilities
May 7, 2026Linux kernel (Azure) vulnerabilities
May 7, 2026Linux kernel (Azure) vulnerabilities
Apr 13, 2026Linux kernel (Azure FIPS) vulnerabilities
Apr 9, 2026Linux kernel (Azure FIPS) vulnerabilities
Apr 9, 2026Linux kernel (Raspberry Pi) vulnerabilities
Apr 1, 2026Linux kernel (Raspberry Pi) vulnerabilities
Apr 1, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (AWS) vulnerabilities
Mar 23, 2026Linux kernel (Real-time) vulnerabilities
Mar 17, 2026Linux kernel (FIPS) vulnerabilities
Mar 16, 2026Linux kernel (NVIDIA) vulnerabilities
Mar 16, 2026Linux kernel vulnerabilities
Mar 16, 2026Linux kernel (Azure) vulnerabilities
Feb 24, 2026hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
Dec 9, 2025kernel: hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
Dec 4, 2025