CVE-2026-93095

🗓️ 17 Sep 2026 16:11:09Reported by LinuxType

hfsplus out-of-bounds write in hfsplus_delete_cat() via corrupted thread record nodeName.length.

Reporter	Title	Published	Views	Family All 73
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-135)	17 Oct 202600:00	–	nessus
Tenable Nessus	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	4 Oct 202600:00	–	nessus
Tenable Nessus	Debian dla-4841 : ata-modules-6.1.0-53-armmp-di - security update	17 Oct 202600:00	–	nessus
Tenable Nessus	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	29 Sep 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-93095	18 Sep 202600:00	–	nessus
AstraLinux	Astra Linux – vulnerability in linux-5.10, linux-6.1	15 Oct 202615:53	–	astralinux
CBLMariner	CVE-2026-93095 affecting package kernel for versions less than 6.6.157.1-1	1 Oct 202604:01	–	cbl_mariner
Circl	CVE-2026-93095	29 Sep 202613:16	–	circl
Cvelist	CVE-2026-93095 hfsplus: validate thread record before delete key rebuild	17 Sep 202616:11	–	cvelist
Debian	[SECURITY] [DLA 4817-1] linux-6.12 security update	4 Oct 202611:36	–	debian

Vulners

CNA

Node

linux linux_kernelRange2.6.12–5.10.270

linux linux_kernelRange5.11.0–5.15.221

linux linux_kernelRange5.16.0–6.1.188

linux linux_kernelRange6.2.0–6.6.157

linux linux_kernelRange6.7.0–6.12.110

linux linux_kernelRange6.13.0–6.18.52

linux linux_kernelRange6.19.0–7.2.6

linux linux_kernelRange7.3.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/hfsplus/catalog.c",
      "fs/hfsplus/hfsplus_fs.h"
    ],
    "versions": [
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "33cda0036bc683fc888c20b04a5fc030e3e8413b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "b9729c51a8b67f8b20b8a8cf395da4be63a0c15b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "af48abc1b00d865c3f4c4d76b901c44115cb7162",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "e20f3b749ad241df77ec1c3e13a9c22209aa1eb3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "7898beee166c1145c0bca364d687b8437435bf1a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "e31985c67ba00a59d9b1340af473c1dbe6c87856",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "473ea7aa35615829f0de7a71e8691d69dc24e328",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "e2ea5cac61acfc11dad22f1d2d4bc71d56c52a20",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/hfsplus/catalog.c",
      "fs/hfsplus/hfsplus_fs.h"
    ],
    "versions": [
      {
        "version": "2.6.12",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.12",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.270",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.221",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.188",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.157",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.110",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.52",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.6",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/33cda0036bc683fc888c20b04a5fc030e3e8413b
git	www.git.kernel.org/stable/c/e20f3b749ad241df77ec1c3e13a9c22209aa1eb3
git	www.git.kernel.org/stable/c/b9729c51a8b67f8b20b8a8cf395da4be63a0c15b
git	www.git.kernel.org/stable/c/e2ea5cac61acfc11dad22f1d2d4bc71d56c52a20
git	www.git.kernel.org/stable/c/af48abc1b00d865c3f4c4d76b901c44115cb7162
git	www.git.kernel.org/stable/c/e31985c67ba00a59d9b1340af473c1dbe6c87856
git	www.git.kernel.org/stable/c/7898beee166c1145c0bca364d687b8437435bf1a
git	www.git.kernel.org/stable/c/473ea7aa35615829f0de7a71e8691d69dc24e328

19 Oct 2026 10:16Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.8

EPSS0.00176