CVE-2026-43228
MEDIUMhfs: Replace BUG_ON with error handling for CNID count checks
Title source: cnaDescription
In the Linux kernel, the following vulnerability has been resolved: hfs: Replace BUG_ON with error handling for CNID count checks In a06ec283e125 next_id, folder_count, and file_count in the super block info were expanded to 64 bits, and BUG_ONs were added to detect overflow. This triggered an error reported by syzbot: if the MDB is corrupted, the BUG_ON is triggered. This patch replaces this mechanism with proper error handling and resolves the syzbot reported bug. Singed-off-by: Jori Koolstra <[email protected]>
References (2)
Core 2
Scores
CVSS v3
5.5
EPSS
0.0001
EPSS Percentile
3.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-617
Status
published
Products (9)
Linux/Linux
< 6.18
Linux/Linux
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - b226804532a875c10276168dc55ce752944096bd
Linux/Linux
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - b6536c1ced315fa645576d3a39c6e07f2a472962
Linux/Linux
6.18
Linux/Linux
6.19.6 - 6.19.*
Linux/Linux
7.0
Linux/Linux
a06ec283e125e334155fe13005c76c9f484ce759 - b226804532a875c10276168dc55ce752944096bd
Linux/Linux
a06ec283e125e334155fe13005c76c9f484ce759 - b6536c1ced315fa645576d3a39c6e07f2a472962
linux/linux_kernel
6.18 - 6.19.6
Published
May 06, 2026
Tracked Since
May 06, 2026