Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2025-38650
CVE-2025-38650:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2025-38650 affects the Linux kernel's HFS Plus filesystem implementation. The vulnerability was discovered in the hfsplus_free_extents function where a mutex_lock check was incorrectly implemented (Debian Security).
Technical details
The vulnerability exists in the hfsplus filesystem code, specifically in the mutex_lock check within hfsplus_free_extents function. The issue occurs when operations such as hfsplus_file_release, hfsplus_setattr, hfsplus_unlink, and hfsplus_get_block are executed concurrently in different files, triggering a WARN_ON condition that leads to system warnings and potential testing failures (Debian Security).
Impact
The vulnerability affects multiple Linux kernel versions across different distributions, including Debian bullseye (5.10.223-1, 5.10.237-1), bookworm (6.1.137-1, 6.1.147-1), and trixie (6.12.38-1, 6.12.41-1) releases (Debian Security).
Mitigation and workarounds
The vulnerability has been fixed in the forky and sid versions (6.16.3-1) of the Linux kernel. The fix involves removing the problematic mutex_lock check in the hfsplus_free_extents function (Debian Security).
Additional resources
Source: This report was generated using AI
Related Linux Kernel vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management