ROS-20260923-73-0047

The vulnerability of the hfsplusstrcasecmp function in the fs/hfsplus/unicode.c component of the Linux kernel involves reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

CVE-2023-2985: Use After Free

A use after free flaw was found in hfsplusputsuper in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service problem...

CVE-2018-14617: NULL Pointer Dereference

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfspluslookup in fs/hfsplus/dir.c when opening a file that is purportedly a hard link in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata...

CVE-2008-4934: Improper Input Validation

The hfsplusblockallocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the readmappingpage function before calling kmap, which allows attackers to cause a denial of service system crash via a crafted hfsplus filesystem image...