CVE-2025-40349

CVE-2025-40349 describes a slab-out-of-bounds vulnerability in the Linux kernel's HFS+ filesystem driver. Specifically, the hfsplus_bmap_alloc function fails to validate record offsets and lengths, allowing an attacker to craft a malicious HFS+ filesystem that can cause the kernel to read memory outside of allocated pages, leading to a system crash. The severity is moderate, with a FAUCET Risk Score of 7/100. While the attack vector requires a malicious HFS+ filesystem, the vulnerability can lead to a denial of service (system crash). The complexity of exploitation is likely high, as it involves crafting specific filesystem structures. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability. It is not listed on the CISA KEV catalog or any hot lists.