CVE-2026-63954

hpfs: fix a crash if hpfs_map_dnode_bitmap fails

State: Published
Severity: 7.8 High
Published: Jul 19, 2026
Updated: Aug 5, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

hpfs: fix a crash if hpfs_map_dnode_bitmap fails

If hpfs_map_dnode_bitmap fails, the code would call hpfs_brelse4 on uninitialized quad buffer head, causing a crash.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 010b08084000ef018f1a8de5197087f3b91d8cfeAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d98d8562b3284b5a5c8eb67e71b794508e46e288Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1648a3c7f4e18f46a4881920133fc4f2494185a0Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7c58c55a2a16f7274772507bd1637be609351b4fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1d73a533760bc5abb83b3cc759133596f7bb708fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0886c6f257fe3663f80218aa1919b0f3f21bf22cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4f37bb30b57d6d403d02673074555bd3c3602befAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 974820a59efde7c1a7e1260bcfe9bb81f833cc9fAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.259 through 5.10.Not affected 5.15.210 through 5.15.Not affected 6.1.176 through 6.1.Not affected 6.6.143 through 6.6.Not affected 6.12.93 through 6.12.Not affected 6.18.35 through 6.18.Not affected 7.0.12 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 010b08084000ef018f1a8de5197087f3b91d8cfeAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d98d8562b3284b5a5c8eb67e71b794508e46e288Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1648a3c7f4e18f46a4881920133fc4f2494185a0Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7c58c55a2a16f7274772507bd1637be609351b4fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1d73a533760bc5abb83b3cc759133596f7bb708fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0886c6f257fe3663f80218aa1919b0f3f21bf22cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4f37bb30b57d6d403d02673074555bd3c3602befAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 974820a59efde7c1a7e1260bcfe9bb81f833cc9fAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.259 through 5.10.*Not affected
5.15.210 through 5.15.*Not affected
6.1.176 through 6.1.*Not affected
6.6.143 through 6.6.*Not affected
6.12.93 through 6.12.*Not affected
6.18.35 through 6.18.*Not affected
7.0.12 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.