Severity
High
Analysis Summary
CVE-2025-0927
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code.
Impact
- Gain Access
Indicators of Compromise
CVE
CVE-2025-0927
Affected Vendors
Linux
Affected Products
- Canonical Ubuntu Linux - 3.13 - 4.4 - 4.15 - 5.4 - 5.15 - 6.8 - 6.11
Remediation
Refer to Linux Kernel Website for patch, upgrade, or suggested workaround information.