{
  "cveId": "CVE-2025-37782",
  "url": "https://patchblox.com/security/cve/CVE-2025-37782",
  "summary": "CVE-2025-37782 is fixed in 29 products on 1 platform, first by CVE-2025-37782, released May 1, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
  "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key\n\nSyzbot reported an issue in hfs subsystem:\n\nBUG: KASAN: slab-out-of-bounds in memcpy_from_page include/linux/highmem.h:423 [inline]\nBUG: KASAN: slab-out-of-bounds in hfs_bnode_read fs/hfs/bnode.c:35 [inline]\nBUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key\u002B0x314/0x450 fs/hfs/bnode.c:70\nWrite of size 94 at addr ffff8880123cd100 by task syz-executor237/5102\n\nCall Trace:\n \u003CTASK\u003E\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl\u002B0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:377 [inline]\n print_report\u002B0x169/0x550 mm/kasan/report.c:488\n kasan_report\u002B0x143/0x180 mm/kasan/report.c:601\n kasan_check_range\u002B0x282/0x290 mm/kasan/generic.c:189\n __asan_memcpy\u002B0x40/0x70 mm/kasan/shadow.c:106\n memcpy_from_page include/linux/highmem.h:423 [inline]\n hfs_bnode_read fs/hfs/bnode.c:35 [inline]\n hfs_bnode_read_key\u002B0x314/0x450 fs/hfs/bnode.c:70\n hfs_brec_insert\u002B0x7f3/0xbd0 fs/hfs/brec.c:159\n hfs_cat_create\u002B0x41d/0xa50 fs/hfs/catalog.c:118\n hfs_mkdir\u002B0x6c/0xe0 fs/hfs/dir.c:232\n vfs_mkdir\u002B0x2f9/0x4f0 fs/namei.c:4257\n do_mkdirat\u002B0x264/0x3a0 fs/namei.c:4280\n __do_sys_mkdir fs/namei.c:4300 [inline]\n __se_sys_mkdir fs/namei.c:4298 [inline]\n __x64_sys_mkdir\u002B0x6c/0x80 fs/namei.c:4298\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64\u002B0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe\u002B0x77/0x7f\nRIP: 0033:0x7fbdd6057a99\n\nAdd a check for key length in hfs_bnode_read_key to prevent\nout-of-bounds memory access. If the key length is invalid, the\nkey buffer is cleared, improving stability and reliability.",
  "published": "2025-05-01T14:15:42Z",
  "severity": "",
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-37782",
  "fixes": [
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.6.1",
      "fix": "SUSE-SU-2025:02307-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02307-1",
      "released": "2025-07-14T12:31:08Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.40.1",
      "fix": "SUSE-SU-2025:01965-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01965-1",
      "released": "2025-06-16T14:54:36Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.40.1",
      "fix": "SUSE-SU-2025:01965-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01965-1",
      "released": "2025-06-16T14:54:36Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.6.1",
      "fix": "SUSE-SU-2025:02254-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02254-1",
      "released": "2025-07-08T15:57:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.28.coco15sp6.1",
      "fix": "SUSE-SU-2025:02923-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02923-1",
      "released": "2025-08-20T07:24:58Z"
    },
    {
      "platform": "linux",
      "product": "kernel-coco_debug",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.28.coco15sp6.1",
      "fix": "SUSE-SU-2025:02923-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02923-1",
      "released": "2025-08-20T07:24:58Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.6.1",
      "fix": "SUSE-SU-2025:02307-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02307-1",
      "released": "2025-07-14T12:31:08Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1.150600.12.24.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1.150600.12.24.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.6.1.150700.17.6.1",
      "fix": "SUSE-SU-2025:02307-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02307-1",
      "released": "2025-07-14T12:31:08Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.6.1",
      "fix": "SUSE-SU-2025:02307-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02307-1",
      "released": "2025-07-14T12:31:08Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6-RT_Update_11",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.1.3.2",
      "fix": "SUSE-SU-2025:01964-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01964-1",
      "released": "2025-06-16T14:54:13Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6_Update_12",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.3.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_2",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.5.1",
      "fix": "SUSE-SU-2025:02333-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02333-1",
      "released": "2025-07-16T12:53:19Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7_Update_2",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.1",
      "fix": "SUSE-SU-2025:02307-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02307-1",
      "released": "2025-07-14T12:31:08Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.6.1",
      "fix": "SUSE-SU-2025:02307-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02307-1",
      "released": "2025-07-14T12:31:08Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.39.1",
      "fix": "SUSE-SU-2025:01964-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01964-1",
      "released": "2025-06-16T14:54:13Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt_debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.39.1",
      "fix": "SUSE-SU-2025:01964-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01964-1",
      "released": "2025-06-16T14:54:13Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.6.1",
      "fix": "SUSE-SU-2025:02307-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02307-1",
      "released": "2025-07-14T12:31:08Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.40.1",
      "fix": "SUSE-SU-2025:01965-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01965-1",
      "released": "2025-06-16T14:54:36Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.40.1",
      "fix": "SUSE-SU-2025:01965-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01965-1",
      "released": "2025-06-16T14:54:36Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.6.1",
      "fix": "SUSE-SU-2025:02254-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02254-1",
      "released": "2025-07-08T15:57:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.28.coco15sp6.1",
      "fix": "SUSE-SU-2025:02923-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02923-1",
      "released": "2025-08-20T07:24:58Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.39.1",
      "fix": "SUSE-SU-2025:01964-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01964-1",
      "released": "2025-06-16T14:54:13Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.6.1",
      "fix": "SUSE-SU-2025:02307-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02307-1",
      "released": "2025-07-14T12:31:08Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.40.1",
      "fix": "SUSE-SU-2025:01965-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01965-1",
      "released": "2025-06-16T14:54:36Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.40.1",
      "fix": "SUSE-SU-2025:01965-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01965-1",
      "released": "2025-06-16T14:54:36Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.6.1",
      "fix": "SUSE-SU-2025:02254-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02254-1",
      "released": "2025-07-08T15:57:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-coco",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-15061.28.coco15sp6.1",
      "fix": "SUSE-SU-2025:02923-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02923-1",
      "released": "2025-08-20T07:24:58Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.39.1",
      "fix": "SUSE-SU-2025:01964-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01964-1",
      "released": "2025-06-16T14:54:13Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.53.1",
      "fix": "SUSE-SU-2025:02000-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02000-1",
      "released": "2025-06-18T11:08:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.6.1",
      "fix": "SUSE-SU-2025:02307-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02307-1",
      "released": "2025-07-14T12:31:08Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "5.10.237-1",
      "fix": "CVE-2025-37782",
      "url": "https://patchblox.com/security/fix/linux/cve-2025-37782",
      "released": "2025-05-01T14:15:42Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.135-1",
      "fix": "CVE-2025-37782",
      "url": "https://patchblox.com/security/fix/linux/cve-2025-37782",
      "released": "2025-05-01T14:15:42Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.25-1",
      "fix": "CVE-2025-37782",
      "url": "https://patchblox.com/security/fix/linux/cve-2025-37782",
      "released": "2025-05-01T14:15:42Z"
    },
    {
      "platform": "linux",
      "product": "linux-6.1",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "6.1.137-1~deb11u1",
      "fix": "CVE-2025-37782",
      "url": "https://patchblox.com/security/fix/linux/cve-2025-37782",
      "released": "2025-05-01T14:15:42Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}