CVE-2026-46299 hfsplus: fix held lock freed on hfsplus_fill_super()

🗓️ 08 Jun 2026 15:46:26Reported by GoogleType

osv🔗 osv.dev👁 1 Views

CVE-2026-46299 fixes a held lock being freed in hfsplus_fill_super by releasing tree_lock via hfs_find_exit on error.

Reporter	Title	Published	Views	Family All 55
ATTACKERKB	CVE-2026-46299	8 Jun 202615:46	–	attackerkb
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-124 (ALASKERNEL-5.10-2026-124)	8 Jul 202600:00	–	nessus
Tenable Nessus	Debian dla-4664 : ata-modules-5.10.0-43-armmp-di - security update	3 Jul 202600:00	–	nessus
Tenable Nessus	Debian dla-4665 : affs-modules-6.1.0-48-4kc-malta-di - security update	3 Jul 202600:00	–	nessus
Tenable Nessus	Debian dla-4671 : linux-config-6.1 - security update	6 Jul 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-46299	9 Jun 202600:00	–	nessus
Amazon	Important: kernel	8 Jul 202600:00	–	amazon
CBLMariner	CVE-2026-46299 affecting package kernel for versions less than 6.6.141.1-1	22 Jun 202621:21	–	cbl_mariner
Circl	CVE-2026-46299	6 Jul 202606:23	–	circl
CNNVD	Linux kernel 安全漏洞	8 Jun 202600:00	–	cnnvd

Source	Link
git	www.git.kernel.org/stable/c/041acda6d9f96006703466449c10c9a69590c8b9
git	www.git.kernel.org/stable/c/3ca80e3012c8be85b4f8d0d20eac8d3b17ff257e
git	www.git.kernel.org/stable/c/6499c9c8ec437a369e7e221dad91f6122b50759d
git	www.git.kernel.org/stable/c/90c500e4fd83fa33c09bc7ee23b6d9cc487ac733
git	www.git.kernel.org/stable/c/bfbcce6a7b0552a390620d9b2c4d2bcb1825cbdc
git	www.git.kernel.org/stable/c/c554ddc87af4d4e4be42f8aed1baec9e1c7588e0
git	www.git.kernel.org/stable/c/d309d3308de658d87c42d97e044c89a226327526
git	www.git.kernel.org/stable/c/e890656accee4c26d932ea388eb8936a6e22184d
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46299.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-46299

10 Jul 2026 03:53Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17

EPSS0.00091