536 matches found
CVE-2025-71271
CVE-2025-71271 affects the Linux kernel hfsplus filesystem driver. A bug introduced during the move to the new mount API could leak filesystem-specific data (sb->s_fs_info) if setup_bdev_super() fails after a new superblock is allocated but before hfsplus_fill_super() takes ownership. The leak...
CVE-2025-71271 hfsplus: ensure sb->s_fs_info is always cleaned up
In the Linux kernel, the following vulnerability has been resolved: hfsplus: ensure sb-sfsinfo is always cleaned up When hfsplus was converted to the new mount api a bug was introduced by changing the allocation pattern of sb-sfsinfo. If setupbdevsuper fails after a new superblock has been...
CVE-2025-71271 hfsplus: ensure sb->s_fs_info is always cleaned up
In the Linux kernel, the following vulnerability has been resolved: hfsplus: ensure sb-sfsinfo is always cleaned up When hfsplus was converted to the new mount api a bug was introduced by changing the allocation pattern of sb-sfsinfo. If setupbdevsuper fails after a new superblock has been...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the incorrect setting of a special inode in hfsplus as of the SIFREG type, potentially leading to...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel. This vulnerability arises from the hfsplus file system; if the setupbdevsuper operation fails when transitioning t...
Linux Distros Unpatched Vulnerability : CVE-2026-43268
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hfsplus: pretend special inodes as regular files Since commit af153bb63a33 vfs: catch invalid modes in mayopen requires any inode be one of...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014323)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014323 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently,...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013664)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013664 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplusstrcasecmp The hfsplusstrcasecmp logic can trigger...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011279)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011279 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplusstrcasecmp The hfsplusstrcasecmp logic can trigger...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012995)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012995 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in hfsplusdeletecat The syzbot reported issue in...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011301)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011301 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in hfsplusextcacheextent The syzbot reported issue in...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013070)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013070 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in hfsplusextcacheextent The syzbot reported issue in...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011325)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011325 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in hfsplusdeletecat The syzbot reported issue in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013220)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013220 advisory. In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARNON from hfspluscatread,writeinode syzbot is hitting WARNON in...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010858)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010858 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: avoid WARNON for sanity check, use proper error handling Commit 55d1cbbbb29e...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007483)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007483 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: remove mutexlock check in hfsplusfreeextents Syzbot reported an issue in hfsplus...
ROS-20260407-73-0011
A vulnerability in the fs/hfsplus/unicode.c component of the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability allows an attacker to gain access to confidential data, violate its integrity, and cause denial of service...
ROS-20260403-73-0008
A vulnerability in the fs/hfsplus/extents.c component of the Linux operating system kernel is related to insufficient locking. Exploitation of the vulnerability allows an attacker to cause a denial of service...
The vulnerabilities of the functions hfsplus_cat_read inode() and hfsplus_cat_write inode() in the fs/hfsplus/inode.c module, which are part of the Apple HFS extended file system support in Linux operating systems, allow attackers to cause system failures.
The vulnerability of the functions hfspluscatread inode and hfspluscatwrite inode in the fs/hfsplus/inode.c module, which is part of the Apple HFS file system support in Linux, is related to insufficient input data validation. Exploiting this vulnerability could allow an attacker to cause a servi...
