CVE-2022-50747
kernel: Linux kernel: HFS filesystem out-of-bounds write via long filenames
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 24, 2025
Updated · August 21, 2026
Description
A flaw was found in the Linux kernel's HFS filesystem. A local attacker could exploit an Out-of-Bounds (OOB) write vulnerability in the hfs_asc2mac function by providing a specially crafted HFS filename that exceeds the maximum allowed length. This could lead to memory corruption, potentially causing a denial of service or other system instability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 · Out-of-bounds Write