CVE-2026-64361

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix u32 overflow in checkandcorrectrequestedlength checkandcorrectrequestedlength compares off + len against nodesize using u32 arithmetic. When the caller passes a large len value e.g. from an underflowed subtractio...

CVE-2026-64360: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: zero-initialize buffer in hfsbnoderead hfsbnoderead can return early without writing to the output buffer when isbnodeoffsetvalid fails or when checkandcorrectrequested length corrects the length to zero. Callers suc...

CVE-2026-64361: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix u32 overflow in checkandcorrectrequestedlength checkandcorrectrequestedlength compares off + len against nodesize using u32 arithmetic. When the caller passes a large len value e.g. from an underflowed subtractio...

Linux Distros Unpatched Vulnerability : CVE-2023-54130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hfs/hfsplus: avoid WARNON for sanity check, use proper error handling Commit 55d1cbbbb29e hfs/hfsplus: use WARNON for sanity check fixed a build warning by...

CVE-2023-54130 hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: avoid WARNON for sanity check, use proper error handling Commit 55d1cbbbb29e "hfs/hfsplus: use WARNON for sanity check" fixed a build warning by turning a comment into a WARNON, but it turns out that syzbot then...

CVE-2023-54130: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: avoid WARNON for sanity check, use proper error handling Commit 55d1cbbbb29e "hfs/hfsplus: use WARNON for sanity check" fixed a build warning by turning a comment into a WARNON, but it turns out that syzbot then...

PT-2025-54988

Уязвимость функции hfs bnode read key драйверов файловой системы hfs/hfsplus ядра операционной системы Linux связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

CVE-2025-0927

Removed by vendor...

PT-2023-33945

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue concerns the hfs/hfsplus component, where a sanity check uses WARN ON instead of proper error handling. The actual impact and attack plausibility have not yet been proven...

PT-2023-34313

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns the hfs/hfsplus component, where a sanity check uses WARN ON instead of proper error handling. The actual impact and attack plausibility have not yet been proven...

PT-2023-33472

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.19 Description The issue concerns the hfs/hfsplus component, where a sanity check uses WARN ON instead of proper error handling. The actual impact and attack plausibility have not yet been proven...