Riskcovery

CVE-2026-43228

hfs: Replace BUG_ON with error handling for CNID count checks

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
Oct 15, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

hfs: Replace BUG_ON with error handling for CNID count checks

In a06ec283e125 next_id, folder_count, and file_count in the super block info were expanded to 64 bits, and BUG_ONs were added to detect overflow. This triggered an error reported by syzbot: if the MDB is corrupted, the BUG_ON is triggered. This patch replaces this mechanism with proper error handling and resolves the syzbot reported bug.

Singed-off-by: Jori Koolstra <jkoolstra@xs4all.nl>

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a06ec283e125e334155fe13005c76c9f484ce759 to before 559f856b109c45844816a1693e259f93d3556c61Affected
  • a06ec283e125e334155fe13005c76c9f484ce759 to before b6536c1ced315fa645576d3a39c6e07f2a472962Affected
  • a06ec283e125e334155fe13005c76c9f484ce759 to before b226804532a875c10276168dc55ce752944096bdAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.57 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.