CVE-2025-71271

hfsplus: ensure sb->s_fs_info is always cleaned up

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
May 11, 2026
Reserved
Mar 17, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

hfsplus: ensure sb->s_fs_info is always cleaned up

When hfsplus was converted to the new mount api a bug was introduced by changing the allocation pattern of sb->s_fs_info. If setup_bdev_super() fails after a new superblock has been allocated by sget_fc(), but before hfsplus_fill_super() takes ownership of the filesystem-specific s_fs_info data it was leaked.

Fix this by freeing sb->s_fs_info in hfsplus_kill_super().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 432f7c78cb000a3151fa0d39585b000312f50d7e to before 0bcfebb83b5460d5be4e5c9dfb19cdaf3d4cb1dbAffected
  • 432f7c78cb000a3151fa0d39585b000312f50d7e to before 1e38d32bb04d85a2c81204a85a34878a497128c8Affected
  • 432f7c78cb000a3151fa0d39585b000312f50d7e to before 126fb0ce99431126b44a6c360192668c818f641fAffected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.