# CVE-2025-37782: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2025-37782 is fixed in 29 products on 1 platform, first by CVE-2025-37782, released May 1, 2025. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2025-37782 - Priority: Routine - CVSS: n/a - EPSS: n/a - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: May 1, 2025 - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-37782 ## Description In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key Syzbot reported an issue in hfs subsystem: BUG: KASAN: slab-out-of-bounds in memcpy_from_page include/linux/highmem.h:423 [inline] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read fs/hfs/bnode.c:35 [inline] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x314/0x450 fs/hfs/bnode.c:70 Write of size 94 at addr ffff8880123cd100 by task syz-executor237/5102 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189 __asan_memcpy+0x40/0x70 mm/kasan/shadow.c:106 memcpy_from_page include/linux/highmem.h:423 [inline] hfs_bnode_read fs/hfs/bnode.c:35 [inline] hfs_bnode_read_key+0x314/0x450 fs/hfs/bnode.c:70 hfs_brec_insert+0x7f3/0xbd0 fs/hfs/brec.c:159 hfs_cat_create+0x41d/0xa50 fs/hfs/catalog.c:118 hfs_mkdir+0x6c/0xe0 fs/hfs/dir.c:232 vfs_mkdir+0x2f9/0x4f0 fs/namei.c:4257 do_mkdirat+0x264/0x3a0 fs/namei.c:4280 __do_sys_mkdir fs/namei.c:4300 [inline] __se_sys_mkdir fs/namei.c:4298 [inline] __x64_sys_mkdir+0x6c/0x80 fs/namei.c:4298 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbdd6057a99 Add a check for key length in hfs_bnode_read_key to prevent out-of-bounds memory access. If the key length is invalid, the key buffer is cleared, improving stability and reliability. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | dtb-aarch64 opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-64kb opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-64kb sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-64kb sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 | | Linux | kernel-azure opensuse-leap 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 | | Linux | kernel-azure sles 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 | | Linux | kernel-azure sles 15.7 | 6.4.0-150700.20.6.1 | [SUSE-SU-2025:02254-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02254-1.md) | Jul 8, 2025 | | Linux | kernel-coco sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 | | Linux | kernel-coco_debug sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 | | Linux | kernel-debug opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-default opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-default sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-default sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 | | Linux | kernel-default-base opensuse-leap 15.6 | 6.4.0-150600.23.53.1.150600.12.24.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-default-base sles 15.6 | 6.4.0-150600.23.53.1.150600.12.24.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-default-base sles 15.7 | 6.4.0-150700.53.6.1.150700.17.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 | | Linux | kernel-docs opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-docs sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-docs sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 | | Linux | kernel-kvmsmall opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-livepatch-SLE15-SP6-RT_Update_11 sles 15.6 | 1-150600.1.3.2 | [SUSE-SU-2025:01964-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01964-1.md) | Jun 16, 2025 | | Linux | kernel-livepatch-SLE15-SP6_Update_12 sles 15.6 | 1-150600.13.3.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-livepatch-SLE15-SP7-RT_Update_2 sles 15.7 | 1-150700.1.5.1 | [SUSE-SU-2025:02333-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02333-1.md) | Jul 16, 2025 | | Linux | kernel-livepatch-SLE15-SP7_Update_2 sles 15.7 | 1-150700.15.3.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 | | Linux | kernel-obs-build opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-obs-build sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-obs-build sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 | | Linux | kernel-obs-qa opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-rt opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | [SUSE-SU-2025:01964-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01964-1.md) | Jun 16, 2025 | | Linux | kernel-rt_debug opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | [SUSE-SU-2025:01964-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01964-1.md) | Jun 16, 2025 | | Linux | kernel-source opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-source sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-source sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 | | Linux | kernel-source-azure opensuse-leap 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 | | Linux | kernel-source-azure sles 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 | | Linux | kernel-source-azure sles 15.7 | 6.4.0-150700.20.6.1 | [SUSE-SU-2025:02254-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02254-1.md) | Jul 8, 2025 | | Linux | kernel-source-coco sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 | | Linux | kernel-source-rt opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | [SUSE-SU-2025:01964-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01964-1.md) | Jun 16, 2025 | | Linux | kernel-syms opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-syms sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-syms sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 | | Linux | kernel-syms-azure opensuse-leap 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 | | Linux | kernel-syms-azure sles 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 | | Linux | kernel-syms-azure sles 15.7 | 6.4.0-150700.20.6.1 | [SUSE-SU-2025:02254-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02254-1.md) | Jul 8, 2025 | | Linux | kernel-syms-coco sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 | | Linux | kernel-syms-rt opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | [SUSE-SU-2025:01964-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01964-1.md) | Jun 16, 2025 | | Linux | kernel-zfcpdump opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-zfcpdump sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 | | Linux | kernel-zfcpdump sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 | | Linux | linux Debian 11.6 (bullseye) | 5.10.237-1 | [CVE-2025-37782](https://patchblox.com/security/data/fix/linux/cve-2025-37782.md) | May 1, 2025 | | Linux | linux Debian 12.15 (bookworm) | 6.1.135-1 | [CVE-2025-37782](https://patchblox.com/security/data/fix/linux/cve-2025-37782.md) | May 1, 2025 | | Linux | linux Debian 13.5 (trixie) | 6.12.25-1 | [CVE-2025-37782](https://patchblox.com/security/data/fix/linux/cve-2025-37782.md) | May 1, 2025 | | Linux | linux-6.1 Debian 11.6 (bullseye) | 6.1.137-1~deb11u1 | [CVE-2025-37782](https://patchblox.com/security/data/fix/linux/cve-2025-37782.md) | May 1, 2025 | --- Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.